Slashdot Mirror


Britney is #1 Virus Celebrity

No France writes "The two ways for an email virus to spread is to use an exploit, or entice the user to click the link/executable. Of course the latter is the easiest, and is the most effective when used in conjunction with a celebrity's name. Despite the recent Jackson suicide emails, Britney Spears is the one to recently edge out Bill Gates as the top virus celebrity. The top 10 (in descending order): Britney Spears, Bill Gates, Jennifer Lopez, Shakira, Osama Bin Laden, Michael Jackson, Bill Clinton, Anna Kournikova, Paris Hilton, and Pamela Anderson."

275 comments

  1. CowboyNeal! by Anonymous Coward · · Score: 2, Funny

    'nuff said.

  2. A little ironic... by ChrisF79 · · Score: 5, Funny

    Isn't it ironic that to trick a user into clicking a fake email, they use the fakest of all celebrities?

    --
    Finance tutorials and more! Understandfinance
    1. Re:A little ironic... by Anonymous Coward · · Score: 0, Funny

      It's just like rain on your wedding day.

    2. Re:A little ironic... by Anonymous Coward · · Score: 0

      Or a free ride when you've already paid.

      Hey, wait a minute... that's not ironic at all. That's not ironic at all!

    3. Re:A little ironic... by MartinG · · Score: 1

      Yes, it is ironic.

      And congratulations, you are the second person ever on slashdot to use the term "ironic" correctly.

      --
      -- MartinG To mail me: echo kewyjlcxyzvjfxbqwh | tr bcefhjklqvwxyz .@adgimnoprstu
    4. Re:A little ironic... by sakri · · Score: 2, Funny

      irony? that's just what's missing from these virus authors today... if it was me, I'd use far cooler names like jessica simps0WN j00 n00b!!! ;)

    5. Re:A little ironic... by Hatta · · Score: 0

      That's just appropriate. It would be ironic if they use Alanis Morissette.

      What is it with brittney spears anyway? I can walk around campus on any given day and see dozens if not hundreds of more attractive girls. And some of them actually have talent, unlike brittney spears. So what is it?

      --
      Give me Classic Slashdot or give me death!
    6. Re:A little ironic... by DigitumDei · · Score: 0

      They haven't been burnt into the minds (I use the word mind loosely here) of the MTV generation. A lot of coke sniffing marketing types determine who is beautiful and popular.

    7. Re:A little ironic... by odaen · · Score: 0, Offtopic

      It's like good advice, that you just didn't take.

    8. Re:A little ironic... by daikokatana · · Score: 0, Offtopic

      A song about irony that is called 'Ironic' but isn't ironic at all - now THAT's irony for you!

      --
      http://jcsnippets.atspace.com/ - a collection of Java & C# snippets
    9. Re:A little ironic... by daikokatana · · Score: 1
      I can walk around campus on any given day and see dozens if not hundreds of more attractive girls.

      That can be said of a lot of those celebs. Paris Hilton? Oh please - I'm no longer at campus but I'd rather chase just about any girl around here instead of that dumb ugly skinny blonde. No offense :)

      --
      http://jcsnippets.atspace.com/ - a collection of Java & C# snippets
    10. Re:A little ironic... by Aaron+Pannell · · Score: 0, Offtopic

      It's just another example of how the totalitarian government that runs this planet partitions off information in such a way that we are forced to... oh wait, wrong site... err... I for one welcome our new fasionable overlords.

      --
      "We can't stop here! This is bat country."
    11. Re:A little ironic... by irc.goatse.cx+troll · · Score: 1

      and who would have thought... it figures.

      --
      Pain lasts, kid. Its how you know you're alive. Sometimes I think this growing up thing is just pain management-TheMaxx
    12. Re:A little ironic... by /ASCII · · Score: 4, Funny

      Britney is not fake, she is really smart person. Check out her guide to semiconductor physics, if you doubt her abilities. I actually read some of her work while studying for my semiconductor finals.

      --
      Try out fish, the friendly interactive shell.
    13. Re:A little ironic... by Anonymous Coward · · Score: 0

      Except that he didn't. Alas.

    14. Re:A little ironic... by Golias · · Score: 1

      Brilliant! Kudos for that link. It made my whole week.

      --

      Information wants to be anthropomorphized.

    15. Re:A little ironic... by Tyler+Durden · · Score: 1

      Actually, no. It's coincidental, not ironic. George Carlin brought up the disctinction in one of his books. (I forget which.)

      --
      Happy people make bad consumers.
    16. Re:A little ironic... by roman_mir · · Score: 3, Funny

      You are probably wrong. I don't listen, but I am sure she is not a fake celebrity. She is a real celebrity, people like to talk about her and know more about her and such.

      She is a fake musician/singer, that is probably true.

    17. Re:A little ironic... by kurzweilfreak · · Score: 2, Funny

      And are you thinking about me when you fuuuuuuck her.... Oh wait...

      --

      kurzweil_freak

      5th Kyu Genbukan Ninpo/KJJR student

      Be the darkness that allows the light to shine.

    18. Re:A little ironic... by Anonymous Coward · · Score: 0

      Why isn't there a (-1, Wrong) modifier?

    19. Re:A little ironic... by Anonymous Coward · · Score: 0

      A thousand forks when all you need is a spoon.

    20. Re:A little ironic... by admiralh · · Score: 1

      There is no spoon.

      --
      Hopelessly pedantic since 1963.
    21. Re:A little ironic... by simcop2387 · · Score: 1

      Irony is not a diabetic going to the pharmacy to get diabetic supplies getting hit by a sugar truck.
      It would be irony if it was a truck carrying diabetic supplies.

    22. Re:A little ironic... by Anonymous Coward · · Score: 0

      Oh you just HAD to start that debate again, didn't you?

    23. Re:A little ironic... by Anonymous Coward · · Score: 0

      Congratulations, Kurzwielfreak. You are the only one to make me laugh in the entire thread.

    24. Re:A little ironic... by lupinstel · · Score: 0

      And that makes it ironic...right? Its ironic...no, a conicidence that as I read this, the person across from me is playing some new acoustic version of that very song.

      --
      Don't blame me, I voted for Cthulhu.
    25. Re:A little ironic... by Anonymous Coward · · Score: 0

      Great site!

      It almost makes me want to study deeper.

    26. Re:A little ironic... by Frank+T.+Lofaro+Jr. · · Score: 2, Funny

      #define spoon for (int i=0; i1000; i++) { fork(); }

      --
      Just because it CAN be done, doesn't mean it should!
    27. Re:A little ironic... by dethnite · · Score: 1

      Well, this just goes to show the types of idiots^H^H^H^H^H people that are opening these emails. It's a good thing that "president" Bush doesn't use a computer...

  3. Toxic by mr.+mulder · · Score: 0, Redundant

    That's because Brittany is Toxic

    1. Re:Toxic by Simon+for+$1 · · Score: 3, Informative

      http://www.google.com/jobs/britney.html

      You come in at number 2. Well done.

    2. Re:Toxic by Anonymous Coward · · Score: 0

      geez
      how hard is to spell britney spears?
      Her name always shows up on my PC

    3. Re:Toxic by Lillesvin · · Score: 1

      "btirtney spears", no, "britnt spears", arg! "breathney spears", I mean, "bitttany spears"...

      On a scale from 1 to 10, where 10 is the hardest, I'd say (judging from http://www.google.com/jobs/britney.html) that it's pretty hard. :-p

      --
      "Live free or don't."
    4. Re:Toxic by Anti+Frozt · · Score: 1

      So... just how many does she have?

      Oh wait...

      --
      In C++, friends can touch each others private parts.
    5. Re:Toxic by Golias · · Score: 1

      I think a big part of the problem is that there is a provence of France called "Brittany."

      "Britney" was a popular-ish baby name for girls in the late 80s and early 90s, but unless you are either in your late teens - early 20s, or have a child at that age, you are probably a lot more used to seeing the spelling of the location, rather than the name.

      To make matters worse, that's also about the time that fucked-up alternate spellings of names started to become popular, so among all the "Meggan but spelled with a Y" freaks roaming about, there's a good six or seven spellings of Britney floating around out there, in both two-sylable and three-sylable versions.

      Remeber that she's two sylables "Brit" ... "ney" and you will do fine.

      Better yet, forget it. Forget she even exists.

      She hasn't been interesting since she stopped wearing those Catholic school uniforms... and even then she was only interesting in a "hey look Ethel, they're putting jailbait skanks on the TV now" kind of way, which stopped being shocking right about when t.A.T.u had their first MTV hit.

      --

      Information wants to be anthropomorphized.

  4. Oh great by alvinrod · · Score: 0, Offtopic
    Like we all needed another reason to dislike Britney Spears.

    If they just showed everyone a nude shot of her at school/work so everyone could get it out of their system, most of this problem would go away.

    1. Re:Oh great by Alberic · · Score: 1

      They cant. Did people stop being interested in Paris Hilton, when she :
      a) Shot that movie
      b) Showed her tits in The Simple Life
      c) had no panties
      ...

      That would just cause people to look for more.

      If the "stars" dont stop acting like bitches (no offense meant to other sexy-and-classy stars) they will get the same interest bitches get in the street. You know it's not worth it, really, but you do check them out, dontcha ?
      --
      *squeak*
    2. Re:Oh great by XFilesFMDS1013 · · Score: 0

      Yeah, but who the hell watches The Simple Life?

    3. Re:Oh great by Nytewynd · · Score: 1

      They cant. Did people stop being interested in Paris Hilton, when she :
      a) Shot that movie
      b) Showed her tits in The Simple Life
      c) had no panties


      If you included a link to a virus right after those lines, you would have had me. Pavlov's dogs and bells were nothing compared to guys and links to naked celebrities.

      --
      /. ++
    4. Re:Oh great by wed128 · · Score: 2, Funny

      Simple People.

    5. Re:Oh great by Alberic · · Score: 0

      Should have thought about this one. But maybe I'm not aliened enough yet. Back to practice.

      --
      *squeak*
    6. Re:Oh great by daikokatana · · Score: 2, Funny
      Nude shots of Britney? Why does the following Simpson quote enter my mind: "Ze goggles - they do nothing!!!"

      Why this obsession with Britney (or other celebs) - if she was just someone you knew and you saw here naked you'd look away.

      --
      http://jcsnippets.atspace.com/ - a collection of Java & C# snippets
  5. Link, please? by cuzality · · Score: 5, Funny


    Please post a link where we can read these emails.

    1. Re:Link, please? by rovingeyes · · Score: 1

      I want the link too. My ISP's spam and antivirus are screwing things up for me. I don't get these emails. (Sigh)...

  6. sad by calvincopter · · Score: 2, Insightful

    I don't understand how anyone can get e-mail viruses easily. i never get any e-mail viruses, but when I do, it's either too obvious and I delete them. how do you guys get e-mail viruses then?

    1. Re:sad by XFilesFMDS1013 · · Score: 1

      It depends (somewhat) on where you put your e-mail address out on the web. Sites like NYTimes that require your e-mail for registration probably won't give your e-mail out to various third parties, they might, but the risk is lower.

      However, if you put your e-mail into www.freepornsexxxxbabes.com, you're probably going to get spammed to all hell.

      Word to the wise, have an e-mail address that you never use if you're signing up for something that you aren't sure about.

    2. Re:sad by TrippTDF · · Score: 0

      Remember, your average computer user is still facinated by the fact they only have to single-click weblinks.

    3. Re:sad by It+doesn't+come+easy · · Score: 1

      Because the email is addressed to them they have to open it...like having to answer the phone when it's ringing even if your caller ID says the calling number is unpublished.

      We're all driven by our compulsions...learn to compulse less and you'll be a lot happier.

      --
      The NSA: The only part of the US government that actually listens.
    4. Re:sad by ozbon · · Score: 0

      Isn't that what Gmail's for? *grin*

      --
      I say we take off and nuke it from orbit. It's the only way to be sure...
    5. Re:sad by daikokatana · · Score: 2, Insightful
      Easy. Because people out there actually *want* to be fooled.

      I bet you 100$ that I can go out on a sunny day, offer people a deal where they have to pay for air (or something similar), and they fork over the dough after a while of creative talking.

      As long as people think that there must be at least a few mails that deliver what they promise, they'll keep on clickin'.

      --
      http://jcsnippets.atspace.com/ - a collection of Java & C# snippets
    6. Re:sad by Filip22012005 · · Score: 4, Funny

      i never get any e-mail viruses, but when I do [...]

      erm...

      --
      When the policeman of the tie, rule you violate, hello punishment of the kitty?
    7. Re:sad by RCanine · · Score: 2, Insightful

      You've obviously not worked with non-computer-types before. I use the word computer-types because computer-savvy does not accurately describe the phenomenon, an Individual who:

      • may be (but often is not) very good with computers
      • may (but often does not) use a computer every day
      • may (but often does not) invest a lot of money into their own personal computer.

      Yet

      • Does not read warning dialogues, merely clicks "Ok" through each
      • Cannot user or locate preferences, configuration or options
      • Forgets about the second mouse button
      • Refuses to learn anything other than the click-this-to-do-that
      • Expects it to work, all of the time, no matter what
      • Likes fun things like Bonzi buddies and weatherBugs
      • Will not remember a new task that has more than 3 steps until they have done it four or five times with instruction.

      These sort of people are the majority of computer users, and they operate on the Anton (not Pavel) Chekov theory of computer use: if there is a file attachment over the mantle in act one, it must be opened by act three.

      These people are the reason why I only recommend Macs--because their system offers a lot more built-in protection between the keyboard and chair, and their software is (for the most part) easy enough to teach gradually and without a jarring, frustrating or confusing experience.

    8. Re:sad by mavenguy · · Score: 1

      Actually, one time I went a bunch of these shady xxx sites and signed up (not the pay parts) with a special yahoo "pr0n" account I set up. Every once in a while I visit it; most of the email is filtered into yahoo's "Bulk" (spam) folder. Interestingly over 50% of these emails are not sex-related; typically they are drab offers for things like printer ink and "Christian debt restructuring".

      Of course, I've never followed any of the links, so I have no idea how many of them are actually malware injection schemes as opposed to simple fraud or dubious offers.

    9. Re:sad by HermanAB · · Score: 1

      Yeah, Windoze users have all the fun. I haven't seen a virus in years and even way back then, they would not run.

      --
      Oh well, what the hell...
    10. Re:sad by Oniko · · Score: 1
      I work at the techdesk at my college, and I gotta say, the vast majority of computers I see are fixed by running Spybot, Adaware, and SAV. There's a lot of silly people out there who'll click on anything that plays on their fears or desires.

      Last year, though, we had an epidemic of emails claiming to be from the "Campusname.edu team", saying that there had been an infection of campus computers and that the user had to download the attached patch. Really well done, actually; it looked totally professional.

      The infection also hit late at night, when even smart folks had minimal functional brain cells. Some of my relatively-savvy buddies managed to click on it. Needless to say, we had a *lot* of computers to fix the next day.

    11. Re:sad by toddestan · · Score: 1

      These people are the reason why I only recommend Macs--because their system offers a lot more built-in protection between the keyboard and chair

      My guess is that if and when malware starts showing up for the Mac, the computer-types are going screw up OSX just as easily as they screw up Windows. Telling them to buy Macs is not a solution, just a temporary fix.

    12. Re:sad by Red+Alastor · · Score: 1

      It's what Spamgourmet is for.

      --
      Slashdot anagrams to "Sad Sloth"
    13. Re:sad by Anonymous Coward · · Score: 0

      actually, I get my share of 'obvious virus-ridden' emails, but I especailly open them to check the company virusscanner, and to stress the sysadmins :)

  7. No big surprise by moz25 · · Score: 5, Funny

    Well, if I have to choose between "see Britney Spears naked" and "see Bill Gates" naked, I'll pick the first worm any day!

    1. Re:No big surprise by zoloto · · Score: 1, Funny
      Well, if I have to choose between "see Britney Spears naked" and "see Bill Gates" naked, I'll pick the first worm any day!
      If you're implying that Britney Spears has a worm I'll be puking right about now.
    2. Re:No big surprise by Alberic · · Score: 1

      On top of this, why is there no 'sexy' guy is this top 10 ? Are the ent girls less responsive to sex traps or are they just not as stupid as guys ?
      I would have liked to see a Clooney or something to comfort me in my girls-dont-have-a-clue-when-on-keyboard idea. But then again, I prove to be wrong.

      --
      *squeak*
    3. Re:No big surprise by alexhs · · Score: 1

      Huh ? Insightful ?

      I still would like better Bill Gates posing for a Teen Beat Photospread than Osama.

      --
      I have discovered a truly marvelous proof of killer sig, which this margin is too narrow to contain.
    4. Re:No big surprise by garcia · · Score: 1, Funny

      Oh come on! You cannot tell me that this photo doesn't make you want to see more?

      Jeez, what kind of geek are you? Porn is porn! ;-)

    5. Re:No big surprise by DrinkingIllini · · Score: 1

      To quote a famous black deli-owner, "Not one of your finds power sexy?"

      In reality, it is because men are by far the largest target for porn, that or women who want to see other women. So there you have it.

    6. Re:No big surprise by ozbird · · Score: 1

      You cannot tell me that this photo doesn't make you want to see more?

      You tease - when all I get is "Forbidden", of course I want to see more.

    7. Re:No big surprise by Carthag · · Score: 1
      ... and "see Bill Gates" naked ...

      I don't think Bill Gates would like it much either. :)

    8. Re:No big surprise by Strawser · · Score: 1

      Odd list. The obvious are the women. It's a list of sex appeal: Britney Spears, Jennifer Lopez, Shakira, Anna Kournikova, Paris Hilton, and Pamela Anderson.

      Then men: Michael Jackson, Bill Clinton,

      I can see them being sexy. I mean, from a hetro-male point of view, women seem to dig them both.

      Then Bill Gates. Okay, not sexy, but rich beyond reality, which is sexy in it's own way.

      Then Osama Bin Laden? Dirty, insane, psychopathing mass murderers don't have a wide ranging sex appeal. It just seems an odd entry in that list.

      --
      The louder he talked of his honour, the faster we counted our spoons. -- Ralph Waldo Emerson
    9. Re:No big surprise by garcia · · Score: 1
    10. Re:No big surprise by fallen1 · · Score: 1

      Well, the first is more of a wormhole and the second IS a worm. By most folks reckoning anyway.. :-p

      --

      Dream as if you'll live forever.
      Live as if you'll die tomorrow.
      ~Anonymous~

    11. Re:No big surprise by Anonymous Coward · · Score: 0

      Given that his bussiness name is MICRO SOFT,
      there are at least two possibilities:
      1) Bill is actually a worm in a human disguise,
      2) Bill has a very short and useful for nothing d...

    12. Re:No big surprise by skiman1979 · · Score: 1

      Well there's always that photo spread of Bill Gates back in (I think) the 80's for Teen Beat Magazine http://blog.monkeymethods.org/2005/01/bill-gates-s trikes-pose-for-teen-beat.html :-)

      --
      Having a smoking section in a public restaurant is like having a peeing section in a public swimming pool.
    13. Re:No big surprise by Abreu · · Score: 1

      AAAAAAAARRRRRGGHH!!

      Oh my god! He actually poses!

      --
      No sig for the moment.
    14. Re:No big surprise by sp3tt · · Score: 0

      Of course not, it would be an infringement of his inellectual property! Next slashdot headline: Bill Gates to DRM his Body.

    15. Re:No big surprise by Anonymous Coward · · Score: 0

      Pervert, you must really be into pregos.

  8. More intelligent software or users? by Crimson+Dragon · · Score: 3, Insightful

    These kinds of stories, while making the majority among us cringe at the stupidity of the user that falls for this, underlies an important point.

    THIS IS WHAT YOUR IT DEPARTMENT HAS TO DEAL WITH!

    Millions of man hours and hundreds of millions of dollars go down the tubes to user ignorance. As these costs spiral, the IT sector diminishes. At some point, we will have to stop the patchwork of protecting the users from themselves and engage in the proactive education from these people so they don't hurt themselves and cost their companies, ISPs, and our economy in lost man hours and dollars. How to do this merits exploration, as for every new procedure we establish to protect the user, the user seems to find a way to break it somehow.

    --
    The Crimson Dragon
    1. Re:More intelligent software or users? by Dunbal · · Score: 1, Funny

      THIS IS WHAT YOUR IT DEPARTMENT HAS TO DEAL WITH!

      Well there has to be SOME price for being able to spend 90% of your time playing MMOG's and downloading pr0n at work... :-)

      --
      Seven puppies were harmed during the making of this post.
    2. Re:More intelligent software or users? by XFilesFMDS1013 · · Score: 0

      THIS IS WHAT YOUR IT DEPARTMENT HAS TO DEAL WITH!

      Well, case in point, the network I'm on right now was infected about two weeks ago for about a week, during which time they had to go through every computer and clean it. It's believed that the virus got in when someone opened an e-mail attachment. Of course, yesterday I had to open up IE (I use FF, but hotmail doesn't like FF), and saw to my joy that someone had installed the "Starware" toolbar. A quick Google search revealed that this wasn't the best thing to have on there.

      So while I have some respect for my IT department, people can still install pretty much anything that they want to. Of course, I can probably blame MS for this since we're using Win2K, but hey, who on this board blames MS for anything?

    3. Re:More intelligent software or users? by jalefkowit · · Score: 5, Insightful
      These kinds of stories, while making the majority among us cringe at the stupidity of the user that falls for this, underlies an important point.

      THIS IS WHAT YOUR IT DEPARTMENT HAS TO DEAL WITH!

      ... at some point, we will have to stop the patchwork of protecting the users from themselves and engage in the proactive education from these people so they don't hurt themselves and cost their companies, ISPs, and our economy in lost man hours and dollars.

      You're talking about educating human nature out of people. Good luck with that.

      The lesson of stories like this one are not that we need to somehow engineer smarter users -- it's that modern information systems are not designed around users to begin with. They're designed around lists of features and ship-by dates.

      A system should behave in a way that one would expect it to. Certain operations -- deleting things, say -- are obviously risky, and I've never met any user who didn't get that. But who would expect opening an e-mail to be a risky proposition? The fact that it undeniably is (in some environments) doesn't mean that people are stupid for not knowing which e-mails to leave closed, it means that e-mail is broken for many millions of users. The fact that e-mail as a medium can be exploited like that is a weakness of the medium, not the user.

      You can lament human nature all you want, but it is what it is. A well-designed system should be able to deal with that. Having to train users to do alien things should be taken as a sign that your system may not be so well-designed, not as a sign that we need to get cracking on Human Being 2.0.

    4. Re:More intelligent software or users? by crimson30 · · Score: 1

      If it's that bad, why not plan a sort of preemptive strike? Send all the users in your organization some Britney Spears e-mails and suspend the accounts of those who open any attachments?

    5. Re:More intelligent software or users? by Capt+James+McCarthy · · Score: 2, Interesting

      Yeah, but I had some users who would purposely click on everything just to cause their work system to get a virus. Since it was not their home system, they didn't care and thought it was funny. What needs to be done is to have some sort of consequence for their action if it can be proven that they were not being ignorant, but just stupid. They thought it was humerous until I told them I had to take their system off line for hours until I could get to it and they can go explain why they can't get any work done to management.

      --
      There are no loopholes. It's either legal or it's not.
    6. Re:More intelligent software or users? by swv3752 · · Score: 1

      What is obvious about having an accelerator be the right most pedal in a car? What is obvious about the right brake slows a bike and the left brake stops a bike?

      The difference between a bike or car and a computer is that serious injury will not result if you screw up a computer. Squeeze the wrong brake and you will flip over your handle bars and land on your face. Press the wrong key on your computer and you might suffer some financial setback but likely no physical harm (unless your sys admin beats you for being a moron).

      There is nothing wrong with designing a system that needs to be taught to use it. We were not born knowing how to type. Heck, we were not born knowing how to speak.

      --
      Just a Tuna in the Sea of Life
    7. Re:More intelligent software or users? by mavenguy · · Score: 1

      Actually, I'd characterize this more as ignorance coupled with malice. They are ignorant in not recognizing the true risk to their computer as well as to the entire network (not to mention the internet as a whole) and it's malice since they do know it's detrimental.

      The approach to this, on first incident, should be a warning not to do this again; on second incident they get fired. This is draconian, but the point here is that (under this fact situation) they deliberately damaged the company.

    8. Re:More intelligent software or users? by Dirtside · · Score: 1
      Certain operations - deleting things, say - are obviously risky, and I've never met any user who didn't get that.
      I've met a few. "You mean if I deleted it, it's gone? That's stupid!" is a direct quote.
      --
      "Destroy science and religion. Science would re-emerge exactly the same; but not religion." - Penn Jillette, paraphrased
    9. Re:More intelligent software or users? by Crimson+Dragon · · Score: 2, Interesting

      Your points are well taken, but I do take issue with a few of them, and feel it important to respond as follows.

      "You're talking about educating human nature out of people."
      - If this was the implication derived, I spoke too strongly. I am not implying an absolute solution here, but I am implying we spend far more effort making bullet-proof software then slowing the sale of as many of the armor-piercing bullets as possible.

      "The lesson of stories like this one are not that we need to somehow engineer smarter users -- it's that modern information systems are not designed around users to begin with."
      - Antivirus software, malware removers, spam-reducing solutions.... these are not designed around users? These systems were designed explicitly to deal with the consequences users encountered. They were not designed in a vaccuum: that is to say, it wasn't reduced to "what are the specs?". It was a bunch of companies capitalizing on the suffering USER base.

      "But who would expect opening an e-mail to be a risky proposition?"
      - A person who has any idea that a computer is a general purpose machine. That is the point of its design. It can do MANY THINGS. Why should anyone be surprised when it does something new or malicious? IT IS COMPLETELY MALLEABLE! A user that does not know this was never given a proper foundation for operating the machine in the first place. The computer does not equal the toaster oven.

      "Having to train users to do alien things should be taken as a sign that your system may not be so well-designed, not as a sign that we need to get cracking on Human Being 2.0."
      - Considering how at least a third of the world's adult population can't read in DEVELOPED nations, to say software that some users don't immediately understand and make the stretch to say the software sucks is quite a stretch to make. Why can't we assail all sides of these issues? Why must the responsibility be placed solely on the software developer, and the user be indemnified of all wrong-doing? You can't plan for every possible contigency as to why the problems of the IT world happen, but ruling out one possible angle that you can't disprove and blaming a group of people who, by and large, strive to produce workable solutions is an insult to the good work many among us have done.

      --
      The Crimson Dragon
    10. Re:More intelligent software or users? by MasterOfMagic · · Score: 1

      The fact that it undeniably is (in some environments) doesn't mean that people are stupid for not knowing which e-mails to leave closed, it means that e-mail is broken for many millions of users.

      No, email is just fine for users. The broken part is the user agent that gets exploited. No e-mail client is safe, but if there were ways to lockdown Outlook beyond "swiss cheese", then many of these worms would vanish. The reason that they are programmed in the first place is due to the popularity of Windows, Outlook Express, and Outlook, and that many of the settings are almost insecure by default.

      For example, I use Gmail. Opening an email for me has never triggered a virus or spyware installation for me, and, assuming that my web brower and operating system are locked down, never should be able to.

      Furthermore, not educating users that their software might have these exploits is planning for failure. You talk about how it's not the stupidity of human beings for the problems of the software and the email program. I disagree. I believe that it's mostly a human problem. If you tell somebody that their email client may be prone to attack and that they shouldn't open email attachments and links from people that they don't know, and they do it anyway, then it is indeed human stupidity that has caused your breech of security. Social engineering (and emails that purport to show you naked celebrities are just this) is the lowest-tech form of compromising security and the only way that it can be prevented is through education. In this case, it is not the SMTP, IMAP, or POP3 protocols being exploited. It's the gullibility of users.

      We shouldn't get cracking on Email 2.0. Instead we should work on a patch to Human Being 1.0 where we inform our users why their machine goes down when they open attachments and links from people they don't know. The maybe we should have meetings about this protocol and retraining and seminars for users. It can't be any more expensive than the cost of an email worm running rampant through your infrastructure, can it?

    11. Re:More intelligent software or users? by IWantMoreSpamPlease · · Score: 2, Interesting

      There is a simple solution when dealing with this.

      Don't try to educate the users, for that is futile and will fail.

      Instead, all the users to educate themselves, by presenting them with the bill for the costs of thier stupidity.

      They will learn very quickly...

      --
      So rise up, all ye lost ones, as one, we'll claw the clouds.
    12. Re:More intelligent software or users? by jalefkowit · · Score: 4, Insightful

      Good points... a few thoughts:

      Antivirus software, malware removers, spam-reducing solutions.... these are not designed around users?

      Nope. No, they're not. They're palliatives to problems that we have inflicted upon users, not systems designed with users in mind. How many users understand what "malware" is -- even those that run Spybot? Is a malware remover something that a user would choose to run, if they weren't forced to by imminent threat from exploitation of broken systems by malicious parties?

      (None of which is to belittle the heroic work that people have done on products like Spybot to help patch these holes. It's hugely important. But can we depend forever on heroes?)

      A person who has any idea that a computer is a general purpose machine... Why should anyone be surprised when it does something new or malicious?

      See, this is the problem. The average user does not see their computer as a general purpose Turing device -- they see it through the prism of whatever application they happen to be using at that moment. If they're reading e-mail, the computer is an e-mail terminal. If they're browsing the Web, it's a Web terminal. If they're in Word, it's a word processor.

      You and I know that the computer is a general purpose machine, infinitely reprogrammable, but the average person does not think that way. They approach the computer through a series of metaphors ("desktop", "mail", "pages"), and the vast majority expect it to follow those metaphors as closely as possible. When it doesn't -- when the abstractions start leaking -- it creates opportunites for malicious parties to exploit the user's resulting confusion.

      Which is exactly what has happened with e-mail -- in certain cases it can behave in a very un-mail-like way. This behavior is being exploited to confuse users into doing the wrong thing. You can try to educate people into not doing the wrong thing, but as long as the underlying metaphor is "mail" it will be very hard to make significant progress.

      Why must the responsibility be placed solely on the software developer... ruling out one possible angle that you can't disprove and blaming a group of people who, by and large, strive to produce workable solutions is an insult to the good work many among us have done.

      Don't look at it as placing blame (my apologies, I didn't mean to come across as blaming you for the problem) -- look at it as opportunity. Apple's recent success in taming UNIX, and Firefox's success in taming Mozilla, should be a lesson to developers everywhere that you can really make it big by reducing complexity, locking down unnecessary options, and streamlining the user experience.

    13. Re:More intelligent software or users? by Anonymous Coward · · Score: 0

      Which is precisely why the new variants of the Kelvir virus are going to be big. My flat mate got hit with it before Symantec had even posted anything about it.

      It spreads via MSN messenger, and it makes the links the users have to click look legitimate enough.

      The computer that got infected was firewalled, had the latest anti-virus updates, and had Windows Update run very recently on it.

      Since it was just released, no anti-virus was going to stop it - and the majority of MSN messenger users are not geeks - they think that a link sent to them by their friend must be fine, even if it is an executable file.

    14. Re:More intelligent software or users? by Crimson+Dragon · · Score: 1

      I concede the first point you addressed. Upon further consideration, Joe Schmo didn't break the email: the email was broken to harm Joe Schmo. Duh and duh.

      The average user not seeing the computer as a general machine is a problem that should have never happened. There are plenty of users that run more than one type of application. How, then, does one reach the prismatic perception you describe of the end user? Plenty of non-technical end-users do not suffer from this predeliction. If a game, word processor, and a video conferencing application can run on the same device, clearly it is more advanced than the toaster oven. The appliance mentality fails, because most common dictionaries, which are supposed to be indicative of common vernacular, define appliances as single-purpose devices.

      The personal offense bordered on a flamebait, and it was not meant that way. To be fair though, in the examples you cite, the taming is not so close to absolute. Apple's Unix basis, while reasonably tamed, still pops up the occasional unintelligible permissions error on the occasional installation, for example. Firefox has a perception of security, but it is difficult to gauge as it is not apparent that malware vendors have Firefox in their sights, considering the user base still pales to IE.

      --
      The Crimson Dragon
    15. Re:More intelligent software or users? by Omnieiunium · · Score: 1

      I agree. If I get a new game or software program, I don't read the manual first (I probably should), I just mess around until something works the right way and I get what I want. In games, just hitting every key on the keyboard will help me figure out what works and what doesn't.

      Thankfully my dad is somewhat good with computers so he rarely gets a virus. However, when it comes to my mom on the computer...

    16. Re:More intelligent software or users? by HermanAB · · Score: 1

      Well, damn, if "The IT Fepartment (TM)" was doing its job properly, then the viruses, trojans and spam would not reach the users in the first place. There are enough toys out there that can stop the shit.

      --
      Oh well, what the hell...
    17. Re:More intelligent software or users? by dodobh · · Score: 1

      So you mean that HTML email, Outlook and Outlook Express should be banned, and only plain text emails should be allowed? Any attachments must be GPG/PGP or S/MIME signed?

      Good idea. Now enforce _that_ in the American workplace.

      --
      I can throw myself at the ground, and miss.
    18. Re:More intelligent software or users? by HuffMeister · · Score: 1

      Perhaps you meant: MS Outlook is broken for millions of users? It's easy to not click on things that are executable when your e-mail client doesn't run things upon double-click. If you have a sane e-mail client, you also wouldn't have to worry about similar problems... Obligatory Pine Plug: I use pine. I don't get viruses : )

    19. Re:More intelligent software or users? by arkhan_jg · · Score: 2, Insightful

      Which is exactly what has happened with e-mail -- in certain cases it can behave in a very un-mail-like way. This behavior is being exploited to confuse users into doing the wrong thing. You can try to educate people into not doing the wrong thing, but as long as the underlying metaphor is "mail" it will be very hard to make significant progress.

      Actually, I'd argue that email works in a very mail like way, even when it's being used against the recipient.

      Say someone sends you a letter. You open it, read the pretty coloured card inside, and toss it in the bin. Thing is, you are now infected (through your skin and breathing ultra fine dust) with the infectious agent that was impregnated on the card. You now spread that virus to your family and friends by close contact (spreading on a lan).

      Possible, but not likely, right?

      Now imagine where 10%-20% of your letters are like this, and 60% more of them are the worst kind of fraudulent advertising and hardcore porn adverts. (numbers pulled from my server logs)
      Imagine that people can send you these virus infected letters anonymously, with virtually no chance of them being caught, and even if they are, there's virtually no law's against what they're doing. Oh, and make it so sending all this crap to you is free for the sender, and is paid for by the recipient.

      Think our human friendly postal mail system would survive like that? Or would it start to collapse from fear of hidden viruses, and dead postman from carrying the huge sacks of junkmail to each door every day.

      In the end of the day, it's not the over-trusting user, it's not the post system that allows anonymity, it's not the lack of enforcable laws from the government, it's not the low cost of sending that causes the problems - it's all of them combined.

      Altering the user metaphor for the way they interact with their computers won't make the problem go away; we need a multipronged approach, and user education to not do bloody stupid things is part of that.

      To draw a metaphor; sharp knives are dangerous objects. If an adult stabbed themselves in the eye with one, because someone left a post-it note on it telling them to do so, could we legimately blame the user for being a bloody idiot? (well, as well as the post-it note leaver).

      --
      Remember kids, it's all fun and games until someone commits wholesale galactic genocide.
    20. Re:More intelligent software or users? by ummit · · Score: 1
      "But who would expect opening an e-mail to be a risky proposition?"
      - A person who has any idea that a computer is a general purpose machine...
      A user that does not know this was never given a proper foundation...

      No, it's not that simple. Users click on things all day long. That's the way modern GUI's work. If we expect users to magically stop and think and reliably decline to click on just those attachmetns that are "dangerous", we will never, ever solve the e-mail virus problem. It's just way to easy, eveb for an experienced user, to accidentally click on one.

      The software knows which attachments are dangerous: those that are executable. The software is in a position to trivially protect the user: don't run executable attachments when clicked on. Adopting this simple policy would cut the e-mail virus problem by 90%. Why it can't be adopted is beyond me.

      Why must the responsibility be placed solely on the software developer, and the user be indemnified of all wrong-doing?

      Because that's the way the real world works. (And anyway it's not as black-and-white as you paint it.)

      Look around you: even if I agreed that "educate the user" were an appropriate strategy, we've been trying it for years and it doesn't work. Time to try something else.

    21. Re:More intelligent software or users? by ummit · · Score: 1
      ...who would expect opening an e-mail to be a risky proposition? The fact that it undeniably is (in some environments) doesn't mean that people are stupid for not knowing which e-mails to leave closed, it means that e-mail is broken for many millions of users. The fact that e-mail as a medium can be exploited like that is a weakness of the medium, not the user.

      Right on, brother!

      Having to train users to do alien things should be taken as a sign that your system may not be so well-designed

      Listen to this man. He knows what he's talking about. Then, if you haven't done so already, read some Don Norman. Yes, well-designed systems do protect users from their mistakes. That's simply appropriate design. It's a tragedy that so few designers understand this, and saddle us with hard-to-use or (in this case) badly dangerous products, and then blame the user when things go wrong.

    22. Re:More intelligent software or users? by BCGlorfindel · · Score: 1

      Actually, I'd argue that email works in a very mail like way, even when it's being used against the recipient.

      Say someone sends you a letter. You open it, read the pretty coloured card inside, and toss it in the bin. Thing is, you are now infected (through your skin and breathing ultra fine dust) with the infectious agent that was impregnated on the card. You now spread that virus to your family and friends by close contact (spreading on a lan).


      Executable code need not be distributed by email. In that sense, email is broken for end users. Users are currently forced to deal with recieving unknown executable code. The parent is observing that knowing how to handle unknown executable code is not something that should be expected of general email users. This is the first time I have seen such a wonderfully concise explanation of what is wrong with email, and the right direction to go in 'fixing it'.

      Now, email of course doesn't need fixing in the sense that it doesn't work as intended. It needs fixing in the sense that 95% of current email users expect email to work much differently than it was originally intended. This isn't the IT world's fault, but seeing as it is now our problem changing/fixing it seems a pretty good idea.

  9. Idol worship by guyfromindia · · Score: 1

    As long as there is 'celebrity' mania, we will have issues like this. Off late, there has been a upsurge in 'celebrity' endorsed marketing, promotions, etc.
    As long as people buy these gimmicks, we will continue to see issues like this.

  10. oops by tnhtnh · · Score: 0

    oops i did it again

  11. Easy by Ironsides · · Score: 1

    I don't understand how anyone can get e-mail viruses easily. i never get any e-mail viruses, but when I do, it's either too obvious and I delete them. how do you guys get e-mail viruses then?

    It's easy. Most people aren't paranoid skeptical cynics that have to de-worm and cleanse these machines after they have become infected like we are. Most are more along the lines of "OMG this is so COOL!" or "OMG Free Pr0N!".

    --
    Fly me to the moon Let me sing among those stars Let me see what spring is like On jupiter and mars
    1. Re:Easy by pAnkRat · · Score: 0

      Yes, but you don't need to click on any links in emails to get free prOn, there is a hell of a lot to see using a browser and a search engine.

      Don't take candy from strangers, if you have no candy of your own, or if you cannot buy candy, go shoplifting!

      --
      we need an "-1 Plain wrong" moderation option!
  12. Impression of random internet user by dannyitc · · Score: 2, Funny

    Hot_britney_sex_video.exe for free?? And all I have to do is click yes? Awesome!

    1. Re:Impression of random internet user by alexhs · · Score: 1

      Hot_britney_sex_video.exe for free?? And all I have to do is click yes? Awesome!

      It usually rather is Hot_britney_sex_video.avi.exe,
      default Windows installations hiding the '.exe'.

      --
      I have discovered a truly marvelous proof of killer sig, which this margin is too narrow to contain.
    2. Re:Impression of random internet user by xtracto · · Score: 1

      exe, avi, htm, doc, xls, ppt, com... it does not really matter. People will only click on the attachment that the program has and the incredibley user friendly Outlook will execute the default action related with the file extension. That is why the .jpg.vbs worms spreaded.

      I continue to say how unsofisticated this virus are... well, current virus writers changed Software Engineering for People Engineering. Anyone remember one of the awesome and pretty high technical virus by Dark Avenger? or any of the old school [real] virus writers?

      --
      Ubuntu is an African word meaning 'I can't configure Debian'
    3. Re:Impression of random internet user by Exitar · · Score: 1

      The video was awesome, but my PC is much slower now...

    4. Re:Impression of random internet user by BCGlorfindel · · Score: 1

      The link you posted to Hot_britney_sex_video.exe must be /.'ed, any mirrors?

    5. Re:Impression of random internet user by spitzak · · Score: 1

      As I have never used outlook or whatever the culprit program is, I am confused by this "hiding extensions" problem. I see how it works but wouldn't a real jpeg file display as only "imagename" and not "imagename.jpg" and thus be somewhat discernable?

      It also sounds like Windows extracts the actual icon from the .exe and displays it, which is mindboggingly stupid. They actually *know* it is an .exe file, with enough knowledge to even parse it and extract an icon! All they have to do is display a generic "exe" icon, or an obvious modification of the imbedded icon. It would seem this sort of fix could have been done years ago, why wasn't it?

  13. Not Pamela Anderson? by dawnread · · Score: 0
  14. Woww.. by Alwin+Henseler · · Score: 0

    So our beloved Mr. Gates, and even Bin Laden, ARE really popular!

    Who would have have thunk...
  15. The top 10 (in descending order): by Anonymous Coward · · Score: 1, Funny

    8ri7n3y 5p34r5, 8i11 64735, J3nnif3r 70p32, 5h4kir4, 054m4 8in 74d3n, Mich437 J4(k50n, 8i11 (1in70n, 4nn4 K0urnik0\/4, P4ri5 Hi170n, and P4m314 4nd3r50n

    1. Re:The top 10 (in descending order): by platypibri · · Score: 0, Offtopic

      This AC obviously has waaaaaaaaaaaaaay to much time on his/her hands.

      --
      Yeah, I guess I'm funny like that.
    2. Re:The top 10 (in descending order): by cbv · · Score: 1

      Looks like SOMEONE needs to get a life...

  16. Solution by BaudKarma · · Score: 1

    I'm filing a class-action suit against Ms Spears. These viruseses have caused untold billions of dollars worth of damage and lost production, and she must be held accountable!

    --
    It's the land of the brave, and the home of the free
    Where the less you know, the better off you'll be.
    1. Re:Solution by Provocateur · · Score: 1


      she must be held accountable

      Britney Spears?! If there's going to be any holding around here, I volunteer...

      --
      WARNING: Smartphones have side effects--most of them undocumented.
    2. Re:Solution by choongiri · · Score: 1
      I'm filing a class-action suit against Ms Spears.
      A class-action suit?... on your own? Good luck with that.
    3. Re:Solution by toddestan · · Score: 1

      I'm filing a class-action suit against Ms Spears. These viruseses have caused untold billions of dollars worth of damage and lost production, and she must be held accountable!

      The sad thing is... you'd probably win. Or atleast get her to settle for an undisclosed sum of money.

  17. Gates and Bin Laden by parvenu74 · · Score: 1

    And they have so much in common too -- unleashing anxiety and terror on the computer using people of the world...

  18. I'm actually surprised by Raleel · · Score: 1

    that it's not _more_ sex symbols. Is anyone really surprised that sex sells anymore?

    --
    -- Who is the bigger fool? The fool or the fool who follows him? --
    1. Re:I'm actually surprised by Spy+der+Mann · · Score: 1

      Is anyone really surprised that sex sells anymore?

      Sex has been selling since 10,000 years ago. D'oh.

  19. Stop blaming the users by Anonymous Coward · · Score: 0

    Seriously, though I can understand your frustration, I'm really getting sick and tired of blaiming the oh so dumb users.

    Computers are everyday tools now. People should simply be able to use them without having to be educated about not clicking a link when receiving an email first.

    That clicking a link can seriously foobar your computer is that problem, not that people click a link.

    1. Re:Stop blaming the users by PyWiz · · Score: 1

      I agree. Cars are everyday tools now. People should simply be able to use them without having to be educated about not flooring the accelerator and driving straight into oncoming traffic at 70mph. That not knowing how to drive a car can seriously foobar your body is a problem, not people that can't drive for shit.

      --
      -py
    2. Re:Stop blaming the users by Anonymous Coward · · Score: 0

      Ah, talk about stupid analogies. :-D

      First off all, computers don't kill people very often (Unless of course the user gets so frustrated, that he throws the computer out of the window and somebody gets hit by it).

      Further, what you describe is knowing how to use the car as a tool. A car is a tool you use to drive from a to b, so in order to use it, you've got to know how to drive it, obviously.

      At the same level, an email program is a program you use to receive and send emails and to know this tool should simply require to know how to send and receive emails.

      Now the original poster wants the people to know more than should be required, which would be equal to wanting people to know not only how to drive a car, but also how the car itself works, which is ridiculous.

    3. Re:Stop blaming the users by PyWiz · · Score: 1

      Talk about stupid arguments :-D

      Now the original poster wants the people to know more than should be required, which would be equal to wanting people to know not only how to drive a car, but also how the car itself works, which is ridiculous

      Nobody is asking that users know how the car itself works. Users don't need to know about SMTP or POP3 or MIME types or anything like that. They do need to know how to use their mail program to receive mail without causing an accident, much like how I need to know how to use my car to get from point A to point B without causing an accident. Knowing how to do things safely IS PART OF THE TASK.

      --
      -py
    4. Re:Stop blaming the users by porcupine8 · · Score: 1
      However, the person who drives into incoming traffic at 70mph obviously knows how to drive a car. They just don't know how to use that tool safely and effectively. They turned the car on, got it in gear, found their way to a road - they know how to drive the car. They're just doing something unsafe with it.

      Similarly, the person who clicks on random email links knows how to use email, just not how to use it safely and effectively. They got their email just fine, they read it just fine, they obviously know how to use it. They just also happened to do something unsafe while using it.

      --
      Warning: Apple/Nintendo fangirl. Likes her electronics cute & cuddly. May be rabid.
    5. Re:Stop blaming the users by Anonymous Coward · · Score: 0

      just because you can't handle a car at speeds in excess of 140 mph doesn't mean that everyone is similarly handicapped, you know.

    6. Re:Stop blaming the users by Anonymous Coward · · Score: 0

      My car only goes 137.5mph, you insensitive clod!

      Um, theoretically, of course.

  20. New Parlour Game by Anonymous Coward · · Score: 0
    Britney Spears, Bill Gates, Jennifer Lopez, Shakira, Osama Bin Laden, Michael Jackson, Bill Clinton, Anna Kournikova, Paris Hilton, and Pamela Anderson.
    New Parlour Game : Split the above list into those you'd definitely shag, and those you wouldn't.

    Incidentally, Osama just beats out J-Lo and Gates for the title "biggest ass on the list."
  21. You obviously have no stupid friends. by bigtallmofo · · Score: 1

    Most viruses are spread by stupid people that open the "Britney Spears Nude" attachment and then it goes through their address book and sends a copy of itself to everyone in it. If you're not receiving such emails, it either means that you have no friends that have added you to their address book or that your friends aren't falling for virused emails.

    Me? I have a lot of stupid friends.

    --
    I'm a big tall mofo.
    1. Re:You obviously have no stupid friends. by cakesy · · Score: 1

      Yeah, right... you must feel really good about yourself. Maybe people are just happy to get an email that isn't from their boss telling them to redo the same bit of work they have been working on all week because the colour doesn't quite work yet, and not being told what the colour is. Maybe because it is not an email from that winging cow in the next cubicle, who is too stupid to realise that she could just stick her head over the partition and ask a simple questions. Bad day at work, not me.

  22. Biggest, most effective spam celebrity of them all by ScentCone · · Score: 4, Insightful

    Is, of course, ourselves. My experience with phishing and other social-hacks-by-email suggest that the ones that seem to really trip people up are the ones that recipients think are about themselves. I have seen the enemy and he is us.

    --
    Don't disappoint your bird dog. Go to the range.
  23. Virus Drills by bigtallmofo · · Score: 5, Interesting

    I've said this many times before, but my idea is to stage virus drills. Every week or so, the IT department should send fake viruses to a random population of the corporate environment. It will have an attachment that will only report to the IT department who opened it. Once a user opens the fake virus attachment, they must watch a 2-hour video on their own time on the subject of "safe email habits".

    Pretty soon, they'll be too paranoid to open any attachment.

    --
    I'm a big tall mofo.
    1. Re:Virus Drills by Linker3000 · · Score: 2, Insightful

      Pretty soon they won't check their email at all and the organisation grinds to a halt!

      --
      AT&ROFLMAO
    2. Re:Virus Drills by caluml · · Score: 1

      I did this once. I sent out an exe that would reboot the machine when ran, and renamed it "virus - do not run.exe". I sent it out to everyone in the company with the subject of "Do NOT run this exe". Needless to say, I got a few phone calls from annoyed (idiotic) users that had lost work. I've no sympathy at all. None. Zilch. Nada. Geen.

    3. Re:Virus Drills by CleverNickedName · · Score: 1

      That's a great idea if the email has a suitably tabloid-headline-like topic. There is no reason why someone needs to SEE BRITNEY NAKED or JOIN GOAT-ORGY CLUB.

      However, any time someone gets infected by opening a more mail with a reasonable topic, the sysadmin should be forced to watch a 2-hour video on sales-dept work practices.

      --


      Unfortunately, I am not Wil Wheaton
    4. Re:Virus Drills by TubeSteak · · Score: 0, Offtopic
      Or people will just ignore e-mails from IT.
      Its pretty easy actually. After you read the title, you just click 'delete'.

      I get along fine without reading them.
      Except when the network is down.
      Then I get an e-mail with the subject: The Network Is Down
      As if I hadn't noticed.

      Sticking to my tried-and-true method of clicking 'delete'
      I get up and ask the nearest cute girl if she's read "that e-mail" from IT?

      Its a great conversation starter.

      "How come the network is down this time?"
      Works like a charm


      Could you tell I made all this up?
      What gave it away?
      Dammit I forgot this is /.
      No cute girls!

      --
      [Fuck Beta]
      o0t!
    5. Re:Virus Drills by Tim+C · · Score: 1

      Once a user opens the fake virus attachment, they must watch a 2-hour video on their own time

      Which, depending on the exact wording of their contract, may well be unenforcable.

    6. Re:Virus Drills by xMilkmanDanx · · Score: 5, Funny

      Nope, pretty soon they don't check their email at all and productivity skyrockets!

    7. Re:Virus Drills by Anonymous Coward · · Score: 0

      Here's a clue, dumbass. The fake virus emails could appear to not come from IT. Just like a real virus.

      And you could appear to be an idiot. Just like a real idiot.

    8. Re:Virus Drills by Daniel+Dvorkin · · Score: 1

      No.

      The sales people and other b-school types who open unknown attachments, regardless of the subject line of the e-mail, are ... how to put this delicately ... morons. They need to be taught, harshly, the error of their ways.

      I don't care if they don't understand the technological issues, or if they don't care about them, or regard the sysadmins as greasy long-haired hippie geeks who speak incomprehensible blather. It doesn't matter. Condition them appropriately, and they'll learn. It's the only way.

      --
      The correlation between ignorance of statistics and using "correlation is not causation" as an argument is close to 1.
    9. Re:Virus Drills by CleverNickedName · · Score: 1

      Sometimes, in order to do the job and make the sales which pay our wages, people need to open mails from strangers (i.e. potential customers).

      This is a requirement. It is our job to make it possible.

      --


      Unfortunately, I am not Wil Wheaton
    10. Re:Virus Drills by bcmm · · Score: 1

      So in your office you are allowed to look at naked pictures of Britney Spears on company time?

      --
      # cat /dev/mem | strings | grep -i llama
      Damn, my RAM is full of llamas.
    11. Re:Virus Drills by Daniel+Dvorkin · · Score: 1

      Then you need to learn how to identify malicious attachments, and how to set up your e-mail client so it won't automatically execute anything. Period.

      --
      The correlation between ignorance of statistics and using "correlation is not causation" as an argument is close to 1.
    12. Re:Virus Drills by Threni · · Score: 1

      > I did this once

      What, it worked so well that you never needed to do it again, or is it just that you promised not to do at at your new job?

    13. Re:Virus Drills by CleverNickedName · · Score: 1

      Bingo. Nobody said the job would be easy. :\

      --


      Unfortunately, I am not Wil Wheaton
    14. Re:Virus Drills by barzok · · Score: 1

      And communication improves, as people move into actual conversations where clear understanding is reached in minutes, not days or weeks of email.

    15. Re:Virus Drills by glsunder · · Score: 1

      Nope, pretty soon they don't check their email at all and productivity skyrockets!

      so does their IQ

    16. Re:Virus Drills by the_pooh_experience · · Score: 1

      This is done several times a year in the Air force. After it is done, they report the results (how many people clicked on the malicious link, etc.) People may privately feel silly, and then life goes on. In short, it doesn't seem to do the trick.

    17. Re:Virus Drills by se7en11 · · Score: 1

      I think a /. drill may be more appropriate.

  24. I hate it when I get a virus from Britney by geoffrobinson · · Score: 1, Funny

    Although many people wouldn't mind.

    --
    Except for ending slavery, the Nazis, communism, & securing American independence, war has never solved anything.
  25. Not just that by stripmarkup · · Score: 1

    This is a more complex problem. Viruses are much more of a problem now than they were fifteen years ago. The reason is simple: profit. As long as people can earn money by creating zombie computers, asking for ransom for your files or what have you, malicious hackers will find a way.

    Think about phising attacks: all you need is a relatively uninformed victim and you have access to their bank account. Celebrity emails just target a different segment of potential victims. The real question to ask is, to what extent do computers need to protect users from their own stupidity? At this point and given the infection numbers, I believe that users are not as much to blame as software companies.

    --
    See charts for twitter trends on Trendistic
    1. Re:Not just that by DrinkingIllini · · Score: 1

      I believe that users are not as much to blame as software companies.

      That's like blaiming the gun company or the bullet manufacturer when people shoot themselves. I agree that the average user needs to be more informed, but putting locks and blocks on everything is not the answer. Personal responsibility is nearly erroded in America, this is just another example where people want to put the blame on someone else, other than a person's own stupidity, ignorance, or arrogance.

    2. Re:Not just that by stripmarkup · · Score: 1

      I would agree with you if it wasn't for the mechanism mentioned in the article. People get infected when they click on a link that exploits a vulnerability in their browsers.

      Second, the comparison doesn't stand. Guns are meant to kill. Computers are not made with the purpose of being infected by viruses. Those who kill themselves, even out of stupidity, are using the main functionality of a gun.

      --
      See charts for twitter trends on Trendistic
    3. Re:Not just that by Anonymous Coward · · Score: 0
      His comparison is fine. Computers are made to run programs, and viruses are programs. That is a use of the main functionality of computers.


      And while guns are made for killing things, I'll warrant you've never seen one primarily made for killing its owner. Now, if you had read "The [Widget], the [Wadget], and Boff", you would have seen a description of one.


      (thulldud, don't have pw at work)

  26. not so innocent . exe by Speare · · Score: 2, Informative
    Reminds me of a page I wrote a few years ago, for newcomers to Linux. I included an explanation of "file type determined by contents" versus "file type determined by extension."

    http://halley.cc/ed/linux/newcomer/filename.html includes a simple graphic to accompany the text.

    --
    [ .sig file not found ]
  27. Wait... Britney IS a virus! by fizz · · Score: 0

    She is a virus, its not that one is named after her.

    1. Re:Wait... Britney IS a virus! by Anonymous Coward · · Score: 0

      wow ur fuckin dumb

  28. Gives to meaning to her song by dgos78 · · Score: 1, Funny

    you know the one... "Toxic"

    --
    SYS 64738
    1. Re:Gives to meaning to her song by Cornflake917 · · Score: 1

      I listened to that song once, and will hopefully never listen to it again. I'd rather be infected with HIV.

  29. Lemme Guess by TubeSteak · · Score: 1, Funny
    I'll give you a rough idea of the e-mails contents:

    1. Britney Spears - See Her Sex Tape
    2. Bill Gates - See Him Spank Naughty Steve Jobs
    3. Jennifer Lopez: See #1
    4. Shakira: See #1
    5. Osama Bin Laden: We Finally Found Him!*
    6. Michael Jackson: Read OJ's Letter of Congrats
    7. Bill Clinton: How He Plans To Run For President... Again!**
    8. Anna Kournikova: See #1
    9. Paris Hilton: Watch Her Snort Cocaine!
    10. Pamela Anderson: Watch Her Suck Off A Donkey!

      *Just kidding, we haven't really found him yet.
      **Cause this is /. - I know he can't run again

    --
    [Fuck Beta]
    o0t!
    1. Re:Lemme Guess by Tony+Hoyle · · Score: 1

      **Cause this is /. - I know he can't run again

      Can't he? So even if you got a really great president (I'm not saying Clinton was, before people start flaming) he can never be reelected?

      That's kinda sad...

    2. Re:Lemme Guess by Golias · · Score: 2, Insightful

      The limit of two terms for a US President goes all the way back to George Washington. A lot of our founding ideas were a reaction to what we perceived as the fundamental unfairness of the monarchy, so we took steps to rigidly limit the power of our executive. An 8-year maximum term was one of those steps.

      FDR broke it by serving part of a thrid term before his death, and there were a lot of people who wanted to get a third term out of Reagan... but traditionally, it's not an option.

      Even if we've got a "really great president" (which seems increasingly unlikely these days, given the candidates put up by both major parties over the last 20 years), it's two terms and out, and, generally speaking, we like it that way.

      --

      Information wants to be anthropomorphized.

    3. Re:Lemme Guess by SatanicPuppy · · Score: 2, Informative

      It WAS a tradition, but with the 22nd Amendment it became immutable law. Two terms is the limit.

      Amendment XXII

      Section 1. No person shall be elected to the office of the President more than twice, and no person who has held the office of President, or acted as President, for more than two years of a term to which some other person was elected President shall be elected to the office of the President more than once. But this article shall not apply to any person holding the office of President when this article was proposed by the Congress, and shall not prevent any person who may be holding the office of President, or acting as President, during the term within which this article becomes operative from holding the office of President or acting as President during the remainder of such term.

      --
      ad logicam Claiming a proposition is false because it was presented as the conclusion of a fallacious argument.
    4. Re:Lemme Guess by schtum · · Score: 1

      Clarification: It was a tradition before FDR, it was made into law after his presidency. Here's a whorish yet informative link to the wikipedia entry.

    5. Re:Lemme Guess by syrinx · · Score: 1

      Can't he? So even if you got a really great president (I'm not saying Clinton was, before people start flaming) he can never be reelected?

      I'm assuming you're not from the US, and therefore don't know some of the.. let's call them "features".. of our government. ;)

      After FDR was elected to four terms, an amendment was passed making sure that wouldn't happen again. Presidents can only be in office for two terms. (With some leeway if the president comes into office in the middle of a term.)

      --
      Quidquid latine dictum sit, altum sonatur.
    6. Re:Lemme Guess by skiman1979 · · Score: 1
      Cause this is /. - I know he can't run again
      I always thought a president could only run for two CONSECUTIVE terms maximum. Does the law actually say that a president, once elected twice, can NEVER be elected again? Or just can't be elected a third time in a row?
      --
      Having a smoking section in a public restaurant is like having a peeing section in a public swimming pool.
    7. Re:Lemme Guess by Anonymous Coward · · Score: 0

      Good point, but you're missing an apostrophe in your signature [the slashdot equivalent of pointing out your flies are undone]

    8. Re:Lemme Guess by Ykant · · Score: 1
      I believe the exact wording is, "No person shall be elected to the office of President more than twice."

      Though it would be a trick if someone ran, won, ran for reelection, lost, ran again later, and won.

      --
      Spelling, grammar, punctuation? We need something that checks logic.
    9. Re:Lemme Guess by nebaz · · Score: 1

      Grover Cleveland did just that.

      --
      Rhymes that keep their secrets will unfold behind the clouds.There upon the rainbow is the answer to a neverending story
  30. Re:(shocked) by TubeSteak · · Score: 1, Informative
    The First Post:
    http://it.slashdot.org/comments.pl?sid=152796&cid= 12822402

    How In God's Name Did It Get Modded REDUNDANT.

    'nuff said.

    --
    [Fuck Beta]
    o0t!
  31. Re:wha? by TubeSteak · · Score: 0, Offtopic
    Dude, you're on the wrong forum,
    You must have confused this with Fark

    Over there they have big pictures that say:
    THIS THREAD IS WORTHLESS WITHOUT PICTURES

    --
    [Fuck Beta]
    o0t!
  32. Haha by billybob · · Score: 0

    That made me laugh :) Everytime I help my mom with her computer, I explain you only need to single click anything on a web page. This has been going on for over 5 years and I still have to tell her everytime, and even then she usually forgets by the end of the "session" or whatever. It's so freaking irritating.

    --
    Joseph?
    1. Re:Haha by rbarreira · · Score: 1

      Yeah, and lots of people also like to click around in the windows start menu, probably because of the small delay which the popups take to appear... But I find it amazing that after doing this so many times they never notice that some of the times, the popup appears before they click... Either they are too distracted with their thoughts to notice, or they just don't think... I think the first is probably the truth.

      --

      The AACS key is NOT 0xF606EEFD628B1CA427BEA93A9CA9773F
  33. Seriously... by everphilski · · Score: 1

    How does Bill Gates outrank the women on that list? (Excluding Michael Jackson of course)

    -everphilski-

    1. Re:Seriously... by northcat · · Score: 1

      Well, when a new user is using a computer and sees something about Bill G. he gets curious. Kinda like if you're in a fast food restaurant and you see something about the cheif-boss owner-guy of McDonalds (whoever he is), you get curious.

    2. Re:Seriously... by Anonymous Coward · · Score: 0

      Ronald?

    3. Re:Seriously... by spitzak · · Score: 1

      I think it's more like "here is an important update for your computer, personally signed by Bill Gates so you know it is good!"

    4. Re:Seriously... by SPY_jmr1 · · Score: 1

      No no no... How about "BILL GATES BEHEADED.avi.exe"? Those who don't know much about Billy would just say, "Hey, free violence." and those that DO know about him, they'd probably click before thinking that they should check that thing for a virus...

    5. Re:Seriously... by Deviant+Q · · Score: 1

      My guess is that it's counting everything purporting to be from Microsoft as from him. Like all those fake patch advisories.

      --
      "May the days be aimless. Let the seasons drift. Do not advance the action according to a plan."
  34. The irony there is that the song wasn't ironic by ianscot · · Score: 2, Funny
    Okay, but that song drove me nuts. When it rains on your wedding day, that's not ironic, it's just disappointing. (If you'd set up a gazebo to prevent the effects of rain, but then the system of drinking fountains in it had a problem that wound up sprinkling all your guests despite it being a clear sunny day, that would be ironic.) A free ride when you've already paid is, similarly, not really "ironic." Argh.

    As far as what it is with Brittney, repeat after me: "Lowest Common Denominator." "White Trash Schadenfreude." There's some fascination with the squalid quality there -- poverty of spirit despite all the money and fame. She's like a punctured silicone implant lying on the hood of a rusty pimped Civic. And I do mean "pimped."

    --
    "Fundamentalism" isn't about divine morality. It's about human authority.
    1. Re:The irony there is that the song wasn't ironic by Anonymous Coward · · Score: 0

      Sigh. Here we are again.

      Okay, as counter-arguments go:
      1)Descriptivism vs. prescriptivism.
      2)Song as an analgoue to poetry vs. prose. Limitations of space, length, chorus. Poetry's virtues of allusion vs. description.
      3)Differing defintions of irony: Socratic, verbal, dramatic OR situational.

      I have no heart to go further into it than that, but rest assured, there are several statements in the song that do indeed meet even the classical definition of irony. The others are more debateable but defensible under the above points, and allow for further examination based on empathy for the situations alluded to.

      Don't believe everything you hear from an Irish comedian who is stuck for a gig :)

  35. Isn't this obvious? by J+Barnes · · Score: 4, Funny

    There's some sense of satisfaction I get in knowing that every time a person ogles, clicks, downloads or otherwise interfaces with that pizza-faced mess known as Brittany Spears, there's a good chance their computer will catch the clap.

  36. Or better yet ... by mshmgi · · Score: 1
    Once a user opens the fake virus attachment, they must watch a 2-hour video on their own time on the subject of "safe email habits".

    Make the offending user listen to 2 Britney Spears CD's.

    That would cure me in a hurry ... but would it be considered "cruel & unusual"?

    Better check w/ the boys down in Legal first.

    1. Re:Or better yet ... by DarkSarin · · Score: 1

      the cruel and unusual stuff only applies to punishments handed out by a court of law--not to the punishments used by corps.

      big difference.

      --
      "We don't know what we are doing, but we are doing it very carefully,..." Wherry, R.J. Personnel Psychology (1995)
  37. No Surpirise Here by rudy_wayne · · Score: 2, Insightful

    "entice the user to click the link/executable. Of course the latter is the easiest, and is the most effective when used in conjunction with a celebrity's name. "

    Proving once again that the number one security problem is not Windows, or flaws in Windows -- it is user stupidity.

    1. Re:No Surpirise Here by bcmm · · Score: 1

      Well, the executable bit helps. A clueless Linux user wouldn't chmod +x britney.jpg.pl just because an email told them to would they? And they wouldn't be able to damage the system because it would be running with user permissions.

      --
      # cat /dev/mem | strings | grep -i llama
      Damn, my RAM is full of llamas.
    2. Re:No Surpirise Here by spitzak · · Score: 1

      This is not really a protection. It is certainly easy to imagine a "user friendly" email program that turns the executable bit on for you when saving an executable file. If the program is capable of figuring out what to do when you double-click the file, it can do this too.

      Then again, if there was a simple "open xyz" program that could be exec'd, then implementing double-click would be trivial, and thus the programmer may avoid the complexity of turning on the executable bit. Such a program is missing from Linux/KDE/Gnome right now, this is a *serious* oversight!!!

      It may be plausable to require sudo style permission to turn on the executable bit. Again I suspect this will not happen unless we get a simple "open" executable.

    3. Re:No Surpirise Here by ummit · · Score: 1
      ...proving once again that the number one security problem... is user stupidity.

      Wrong, wrong, a thousand times wrong.

      If what you say were true, we would make cars safer by telling drivers to be more careful; we wouldn't muck around with seat belts and air bags.

      Why should the user have to constantly worry about which attachments are safe or not, when the computer is in a much, much better position to do so reliably and accurately? Performing mundane tasks reliably and accurately is what computers are for.

      Teach the computer that GIFs and JPEGs are safe and can be opened, that EXEs are not and cannot be opened, and be done with it.

      (Yes, I know about JPEG exploits. That's a separate issue, and serves only to distract from the point that untrustworthy executables are inherently unsafe and should never be opened.)

  38. users, ugh by Selcitset · · Score: 0

    i always compare it to getting a package from someone you dont know. if you received an anonymous package, would you open it? would you call the cops? or would you let the seagulls at the dump figure it out? its just common sense. if you didnt ask for this, and its not from anyone you know, dont f'in open it. luckily a virus is only going to blow up your computer, not your face.

  39. Wow... by lbmouse · · Score: 0

    Just downloaded the Hot_britney_sex_video.exe. Oops... I did it agai
    +++ATH
    NO CARRIER

  40. Say what? by catdevnull · · Score: 2, Funny

    Osama bin Laden is a celebrity? ...I guess he is on Al Jazeera

    --

    I might know what I'm talkin' about, but then again, this is Slashdot...
  41. Re:Biggest, most effective spam celebrity of them by mavenguy · · Score: 1

    No wonder all those "3nl4rg ur m3mbr" emails work.

  42. I find it rather disturbing... by EphemeralPhart · · Score: 3, Funny

    in that I recognize every one of those individuals. I can even put a face to most of them !

    What gamut of innate garbage must my brain contain beyond that...

    I'm disgusted by the cesspool that is my mind and, for once, very conscious of the torrents of crap being sluised into it every moment.

    And here I am reading slashdot.

    1. Re:I find it rather disturbing... by Anonymous Coward · · Score: 0

      "What gamut of innate garbage"

      I think you meant 'inane', unless you meant were born with it.

    2. Re:I find it rather disturbing... by Deviant+Q · · Score: 1
      ...the torrents of crap being sluised into it every moment

      Yeah, it sounds like you've been downloading a bit too much of a certain type of "torrent" :-P

      --
      "May the days be aimless. Let the seasons drift. Do not advance the action according to a plan."
  43. oh wow...I had no idea by nilbog · · Score: 1

    I was not aware we were considering Osama Bin Laden a celebrity now. Is he A list or what?

    --
    or else!
  44. At the CIA by jdepons · · Score: 3, Funny

    Agent: "Cheif, we interceped another email from Osama Bin Laden"

    Chief: "We got him this time. Open it asap"

    Agent: "I don't understand, all it did was change my home page to xxxarabia.com"

    Chief: "Damn you Bin Laden!"

  45. So... by Mathiasdm · · Score: 1

    Why isn't 'Goatse' on that list?

    --
    Join the anonymous, help develop the network: http://www.i2p2.de
    1. Re:So... by grimJester · · Score: 1

      Why isn't 'Goatse' on that list? Yes, that hot_goatse_xxx_action.exe virus I got was really annoying. I mean, I was innocently expecting this "Goatse" guy I've heard so much and then this huge close-up pic of Britney Spears pops up! Boy, was I embarrassed. My co-workers couldn't stop laughing.

    2. Re:So... by Anonymous Coward · · Score: 0

      It is on the list! It's just your anagram has an extra "o" letter.

  46. Now and then they're actually sneaky. by Vacindak · · Score: 2, Interesting

    Sneakiest one I ever saw tried to infect my computer by searching through the currently infected computer's sent messages in outlook express looking for ones with attachments. It took the subject line of the original, changed it to "Re: [original subject line]", and set the body of the message to be something along the lines of:

    I hope you didn't open that last attachment I sent you. Turns out it was actually infected with a virus. I've attached a cleanup tool that ought to remove the virus for you. I'm really sorry about that!

    Fortunately for me, the last attachment he had sent was a jpeg. So I let him know he was infected with a rather clever virus...

    But I rather imagine that that virus didn't spread well for all its cleverness. Relying on the contents of someone's sent folder has got to drastically reduce the number of people for the virus to spread to.

    1. Re:Now and then they're actually sneaky. by CommiePuddin · · Score: 1

      Relying on the contents of someone's sent folder has got to drastically reduce the number of people for the virus to spread to. How many causal users, who would fall for all the dupes that so many have already metioned, do you think actually clear out the sent items folder of OE on a anywhere near regular basis?

      --
      x = x + ++x; //It's golden.
    2. Re:Now and then they're actually sneaky. by StalinsNotDead · · Score: 1

      Relying on the contents of someone's sent folder has got to drastically reduce the number of people for the virus to spread to.

      How many causal users, who would fall for all the dupes that so many have already metioned, do you think actually clear out the sent items folder of OE on a anywhere near regular basis?


      As it searched for items in the outbox with attatchments, of the group of casual users mentioned, how many know how to attatch files to emails?

      --
      Thanks to the internet, we can now all die alone together! -SomeWoman
    3. Re:Now and then they're actually sneaky. by CommiePuddin · · Score: 1
      As it searched for items in the outbox with attatchments, of the group of casual users mentioned, how many know how to attatch files to emails?

      I have a guy here at the office that, for whatever reason, has a "winmail.dat" file attached to every e-mail he sends.

      Innoculous enough, as it never gets picked up on my virus scanner. Nonetheless, sometimes it's not just the user.

      --
      x = x + ++x; //It's golden.
    4. Re:Now and then they're actually sneaky. by m50d · · Score: 1

      If only. There was a libjpeg vulnerability not so long ago that could be used to execute arbitrary code just by displaying a message with a jpeg in outlook or OE. So I wouldn't be surprised if there was a virus based around jpegs.

      --
      I am trolling
    5. Re:Now and then they're actually sneaky. by Vacindak · · Score: 1

      Yeah, I heard about that. But this particular incident conveniently occured long before that exploit was discovered. Like two to three years prior, IIRC. It was quite awhile ago.

  47. Simple. by Anonymous Coward · · Score: 0

    We just kill them all.

    I heard a story about a predecessor loosing it and pulling a gun on someone. I can relate to that.

    1. Re:Simple. by Anonymous Coward · · Score: 0

      I sure hope he tightened it back up afterwards.

  48. Britney also #1 music virus by yagu · · Score: 1

    I'm surprised I haven't seen anyone comment on the fact that Britney is also one of the top music viruses! Hasn't anyone noticed that CD's are being sold with her picture on it claiming to have music on it?

  49. holy crap by Anonymous Coward · · Score: 0

    Seriously, everyone here saying it's not the users fault is probably one of those moron users. Anyone and everyone should have at least basic reasoning and decision making skills. You expect people to make decisions for them selves in every other aspect of any job, but God forbid they can discren if the free pr0n in there email might be bad for their computer. It's not like it's going to kill them to learn a little something new, it'll be good for them to stimulate their minds a little. Email like any tool works much better if you know how to use it more effectively.
    What do you want developers do to fix the "problem" anyway? Make it so you can't send files? While you're at it why don't you ask hammer manufacturers to make it so you can't hit yourself with their hammers?

  50. Creative, but wrong. by RealProgrammer · · Score: 2, Insightful

    I applaud your creativity, but that's bad training.

    • Some users may never see the virus-laden email, since the junk email controls you have implemented (haven't you?) will catch your message.
    • Users will bypass it. Word will quickly spread about the test, probably by an email "hoax warning" from that tech wannabe in the office. Users will have a heightened resistance to your mail, or on the other extreme may open it since they know it's from you.
    • It sets up the IT department as the villain, perpetuating the "us vs. them" mentality.
    • It doesn't give the users enough A:B comparisons between good attachments and bad ones.

    Generally speaking, positive reinforcement (reward for good behavior) works better than punishment for bad behavior. Punishing bad behavior may get results, but it also reduces overall performance for both the individual and the group, by engendering fear of failure.

    Negative reinforcement (rewarding good behavior by removing punishment) can work well in the right circumstances. The punishment should have been already earned and deserved, and both the good and bad behavior should be related somehow to the punishment.

    Users are demanding the ability to use their email as a file copying and storage mechanism. We as sysadmins can point out that we have a much more efficient means of doing that - this file server over here - but they don't seem to like that. You can lead a horse to water but you can't make him think.

    If you really want to do some training:

    1. Make a fake virus that when run gives the user immediate feedback, lying to them that it's doing damage.
    2. Make another attachment that just says "bad choice, I could have been a virus".
    3. Make other messages that are harmless text or pdf attachments
    4. Set up a formal testing session in which the users are given a bunch of regular spam, good mail, and a mix of your attachments. Tell them not to open bad attachments but to try to open the good ones.
    5. After the formal training session, do a real world test in which they are rewarded for the good attachments they open. This time for the bad choices, only include the "I could have been a virus" ones.

    Done in a spirit of cooperation, rather than confrontation, you should see an immediate sharp reduction in the number of viruses that people open.

    --
    sigs, as if you care.
    1. Re:Creative, but wrong. by Tony+Hoyle · · Score: 1

      For the most part you can remove the problem. Block *all* executable attachments and scripts at the mailserver. If they want to send an executable, then need to zip it. In my experience users have no trouble understanding that.

      This works extremely well (kept a couple of places I was at virus free for years without any other effort) but lately viruses have started hiding themselves in zip files.

      Since things like Norton and McAfee are often behind the curve with their virus definitions there's still a small risk from those zipped viruses.. it's a small risk but it's there.

    2. Re:Creative, but wrong. by packetl0ss · · Score: 1
      For the most part you can remove the problem. Block *all* executable attachments and scripts at the mailserver. If they want to send an executable, then need to zip it ... This works extremely well (kept a couple of places I was at virus free for years without any other effort) but lately viruses have started hiding themselves in zip files.

      Couldn't the same technique of blocking executable files based on extension also work inside a zip file too?

  51. Surprising... by mackman · · Score: 1

    Anybody else surprised? I would have thought Paris Hilton had the most viruses.

  52. Herpes? by Anonymous Coward · · Score: 0

    Yeah, but you'd hit it anyway, right? Admit it, you dog....

  53. ugh.. by Beefslaya · · Score: 0
    /^Subject: .* \Bill Clinton.*$/ REDIRECT bill@whitehouse.com(yes,com)

    /^Subject: .* \Brittany Spears.*$/ DISCARD

    /^Subject: .* \Bill Gates.*$/ REDIRECT eatme@moneywhore.com

  54. Urgent Memo to Exploit Development Team: by hullabalucination · · Score: 1

    In light of these findings, we made need to rethink our 'Phyllis Diller Bares All' strategy.

  55. DON'T look at ebay auction 6536902252 by antispam_ben · · Score: 1

    Why isn't ...

    And especially don't read the "Questions from other members"

    --
    Tag lost or not installed.
  56. Offended by Anonymous Coward · · Score: 0

    Ok, now I'm offended.
    All of the virus celebrities are either women or girly-men (and whatever Michael Jackson is...).

    Why aren't there some action hero celebrities?
    Where's Arnold? Bruce Willis? Bruce Lee?
    ("Dear sir, I am the son of the late martial art warrior, Bruce Lee. I need your help...")

    Even the buff chicks are not listed. Where's Angelina Jolie? Or Rosie Odonnell? (Either could kick Bill Clinton's butt in a second.)

    These viruses seem to only target the shallow majority. We need viruses that infect the little guys! The hard working nobodies who have no life and run Unix! (Porn sucks man. I like emacs!) It's time for a virus that represents the average person, rather than those nip-and-tuck girly-girls.

  57. Re:(shocked) by freeweed · · Score: 1

    Because there have been 48,978 unfunny "Cowboy Neal" posts preceding it?

    --
    Endless arguments over trivial contradictions in books written by ignorant savages to explain thunder in the dark.
  58. Just correcting a few minor errors... by VHerring · · Score: 1

    Actually, FDR died in his 4th term as President. There was no limit before the 22nd Amendment. Also, the limit now is 10 years, not 8. It is legal for someone to serve up to 2 years of his predecessor's term (i.e. if Bush were to die in 2006, Cheney could concievably serve as President from 2006 until January 2017.)

    1. Re:Just correcting a few minor errors... by TubeSteak · · Score: 1

      I don't think Cheney would last that long
      Sorry, had to be said.
      Does that mean The Pres can run for a 2nd and a half term?

      --
      [Fuck Beta]
      o0t!
    2. Re:Just correcting a few minor errors... by admiralh · · Score: 1

      No. It means that a VP who succeeds a President to office can run for two terms *if* he/she served less than half of the predecessors term.

      So, since LBJ became prez in Nov. 1963, he was eligible to run in 1968, but chose not to.

      Gerald Ford, had he been elected in 1976, would not have been eligible to run in 1980, since he became prez in August, 1974.

      I always thought it was ironic that Republicans pushed through the 22nd amaendment is response to FDR, but then were upset Reagan couldn't run for a third term.

      --
      Hopelessly pedantic since 1963.
    3. Re:Just correcting a few minor errors... by Golias · · Score: 1

      That's not really irony, Alanis, but it is amusing.

      In spite of the fact that I believe we would have been much better off with a third term of Reagan, senility and all, than the single term of Bush the Elder we ended up with, I maintain that the limit was (and is) a darn good idea.

      I think most Americans, regardless of their political views, would agree that it is a Good Thing that neither Bill Clinton nor Bush the Younger can run for the office again in 2008.

      --

      Information wants to be anthropomorphized.

  59. and this implies that... by dAzED1 · · Score: 1

    Britney Spears, Bill Gates, Jennifer Lopez, Shakira, Osama Bin Laden, Michael Jackson, Bill Clinton, Anna Kournikova, Paris Hilton, and Pamela Anderson.

    And this implies that the overwhelming majority of such are openned by men, not women. So men can't joke about women being computer illiterate, eh?

    It would be a rather interesting study to determine if men are more likely to infect themselves than women...

    1. Re:and this implies that... by Anonymous Coward · · Score: 0
      ...majority of such are openned by men, not women. So men can't joke about women being computer illiterate, eh?...

      well, it could also be construed that women can't figure out how to open e-mails.... *evil grin*
  60. Why do people click attachments in emails from OBL by RedLaggedTeut · · Score: 1
    I can imagine how such an email reads:
    Dear friend, my name is Ali Ben Ogampa. I'm confiding in you because I am in need of a trustworthy associate. I'm a relative of Osama Bin Laden, whose assets have recently been frozen by the US government. However, I would be able to extract assets worth 20 mio $US with the help of a US national, who would offer to receive the sum split into small sums in his bank account and forward it to me, minus a handling bonus of 5% of the entire 20 mio ...
    --
    I'm still trying to figure out what people mean by 'social skills' here.
  61. Osama? by Anonymous Coward · · Score: 0

    Since when did Osama become a celebrity? Did i miss something?

  62. No France website by dyefade · · Score: 1

    That site just isn't funny... It's not even satirical. Maybe I don't get it?

    1. Re:No France website by lustucru · · Score: 1

      I didn't get it either. To me, It's simply expressing some hate.
      I wish this guy is a patriot and often go fight for his country. Or maybe he is a coward and enjoy telling crap about other people, hidden behind his computer.

    2. Re:No France website by dyefade · · Score: 1

      To be honest, I don't think it's hatred even. It might be a reference to the idea that Americans seem to reasonlessly (it seems to me as a Brit) hate the french, but... it's just not funny. I really don't think it's genuine hatred though.

    3. Re:No France website by lustucru · · Score: 1

      After all, I think I was angry. You're absolutly right. It's just not funny. Something funny : He's jealous because of my french accent... I stole her girlfriend thanks to it. :-p

  63. You almost have to love virus writers... by Hosiah · · Score: 1
    for the targets they pick! I'm so much in favor of Brittany fans and such getting picked off, I could almost love it!

    Incidentally, I sometimes like to capture a virus and study it on my Linux box, using a hex editor. Without fail, every one I've heard of and every one I've viewed this way has "Microsoft Visual Basic" written in it.

    Has *anyone else* ever seen or heard of a virus not written in VB? Is VB used for anything else? Pardon my young age, but did viruses exist before the BASIC language ever came out? Could you make the world's simplest virus-killer just by going:

    #!/bin/bash strings $FILE >> inspect grep "Visual Basic" inspect if [ "$?" > "0" ]; then rm -rf $FILE fi rm -rf inspect

    ?

    1. Re:You almost have to love virus writers... by Hosiah · · Score: 1
      How embarassing! That should have been:

      #!/bin/bash
      strings $FILE >> inspect
      grep "Visual Basic" inspect
      if [ "$?" > "0" ]; then
      rm -rf $FILE
      fi
      rm -rf inspect

      Something in my brain seems to balk at typing two languages at the same time!

    2. Re:You almost have to love virus writers... by CommanderData · · Score: 1

      Pardon my young age, but did viruses exist before the BASIC language ever came out?

      Viruses have been around for a long time, and they certainly haven't always been coded in VB. In the good old days viruses were usually a handfull of bytes in size, possibly ranging up to several KB. Coded in hand written assembly language. They don't make 'em like they uesed to ;)

      What VB (and Windows, and the Internet) did was lower the barrier to entry. Instead of requiring intimate low-level hardware and software knowledge learned from years of reading books and trial/error, any fucktard can go out and download sample virus code, tweak it a bit and release it as his/her own.

      --
      Urge to post... fading... fading... RISING!... fading... fading... gone.
    3. Re:You almost have to love virus writers... by m50d · · Score: 3, Interesting

      Yes, they did. Back in "the day" viruses were often written in hand-coded assembly. That was craftsmanship, that was /misty eyes. Seriously, visual basic is used mainly for two reasons. Firstly, most virus writers are fairly immature (except those trying to get botnets for money) and visual basic is often the first language they learn. Secondly, visual basic scripts include their source, thus if you want to base your virus on an existing one, it's a lot easier to do with a visual basic one than decompiling a virus and trying to make sense of it. Any other dynamic language would work for this, but windows ships with visual basic interpreter wheras it doesn't include one for perl, python etc. (and dos scripting is too useless)

      --
      I am trolling
    4. Re:You almost have to love virus writers... by orkysoft · · Score: 1

      For your next exercise, try performing this function without using a temporary file. Also, you don't need to use `strings` at all when grepping a file.

      --

      I suffer from attention surplus disorder.
    5. Re:You almost have to love virus writers... by jnf · · Score: 1

      i find it humorous that you crack on vb coders when you yourself obviously cant code beyond a python or bash script (yes ive been to your blog).

    6. Re:You almost have to love virus writers... by jnf · · Score: 1

      sh sh, he plays in 'hex editors' all day inspecting viruses, dont ruin his imaginary fun with such concepts.

  64. BG p0rn by Dog135 · · Score: 1

    As far as what it is with Brittney, repeat after me: "Lowest Common Denominator." "White Trash Schadenfreude."

    That, and the fact that "Click here for Bill Gates p0rn" doesn't get quite the response the virus writers want.

    --
    "That's so plausible, I can't believe it!" - Leela
    1. Re:BG p0rn by ChetPoint · · Score: 1

      for the sake of my life /me can't understand why... http://www.mugshots.org/misc/bill-gates.html

  65. STDs ? by cyberchondriac · · Score: 1

    Anyone else read the title and think STDs or Hepatitis ? I guess that would be Pam Anderson though.

    --

    Look back up at my post, now look back down, you're on the Internet. Now look back up. I'm a signature.
  66. I don't think it does... by seanvaandering · · Score: 1

    Is anyone really surprised that sex sells anymore?

    It doesn't. That why the easy lure for easy prey, notice how most virii files also have the word "free" in them or that its free as implied because its in their inbox!

  67. Not for me by mike3k · · Score: 1

    Since I hate Britney so intensely, I wouldn't click on it.

  68. I'm getting slow by Prince+Vegeta+SSJ4 · · Score: 1

    I thought this article was about the celebrities WITH the most viruses, then I saw Bill Gates and thought 'he can't get around' that much to be getting all of these things.

  69. Thunderbird by MozillaMike · · Score: 0

    Isn't that what Thderbird is for???(duhhhh)

    --
    GCS/MU d- s: a--- C++ W+++ w+ M-- PS--- PE++ t+ R+ tv b+ DI++ G e- h! !y
  70. When will this hole be closed? by ummit · · Score: 1

    When, oh when, will someone fix things so that clicking on an attachment of type .exe does not go and execute it? That one simple change would reduce the e-mail virus problem by about 90%.

  71. Angelina Jolie Is Next! by Master+of+Transhuman · · Score: 1


    I can't wait for my first virus email proclaiming that I can see her naked!

    Ooh, it's so exciting!

    Oh, wait, I already have 1,800 pictures of her - and several video clips - including the naked lesbian sex scene in "Gia".

    Never mind.

    --
    Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
  72. Not all users are stupid! by happyclam · · Score: 1

    Two years ago I "trained" my wife not to click certain attachments. I implemented this training by leaving her alone in the office with the computer one day, and she happened to acquire a virus. Fortunately, she's reasonably smart and has not done it again.

    Now, I have to worry about my 8-year-old son, who has just discovered he can play flash-based Star Wars games on the internet. He also has discovered he can find out about bugs and birds and science through Google. I expect that some day soon he will find out about viruses. (Anyone want to make odds on whether he discovers viruses before or after he discovers pr0n? I'm guessing the pr0n first, and then he'll start clicking on the Britney links.)

    Anyway, a question for all of you: How do you train an 8-year-old to be independent on the computer but also be safe about what he clicks? (Yes, we use Firefox.) His six-year-old brother is also catching on fast.

    --
    He looked at me and said, "Kid, we don't like your kind, and we're gonna send your fingerprints off to Washington."
  73. Britney? No worries! by cburman · · Score: 2, Funny

    Britney? Whew! That's a Windows virus! Now, if it had been Natalie Portman (petrified and naked) I would have been worried.

  74. Christina Aguilera by 21mhz · · Score: 1

    sure beats Britney these days in the infamous celebrity scale.

    --
    My exception safety is -fno-exceptions.
  75. It's time for more descriptive application names by zippthorne · · Score: 1

    Outlook express should really be called: MS Dirty Needles.

    What it needs is some kind of needle exchange to make the whole thing safer.

    I used to laugh at webmail...

    --
    Can you be Even More Awesome?!
  76. Re:(shocked) by Anonymous Coward · · Score: 0

    redundant != has not been said on this particular slashdot thread before

    For instance, if I posted "grass is green" then I'd expect to get modded redundant, because very nearly everybody already knows that and it doesn't need to be said. It's redundant. Just like this is redundant, because anyone on slashdot should know what redundant means.

  77. It's quite simple, really. by Anonymous Coward · · Score: 0

    Because we've heard it all before.

    It's not like it's the first "first post" we've ever seen here, y'know. Hell, someone (you?) has been posting the same damn comment every time they've seen the first post moderated redundant.

    For example, just because nobody has yet said "in Soviet Russia, somebody set up Natalie Portman the bomb" in *this particular* story doesn't make it new, insightful, informative or original.

    Likewise, I've seen pretty nearly exactly the comment you made before made to previous stories. I would moderate it redundant if I had points, simply because it *is* redundant, whether or not it's been posted in this particular story.

    In short, mods of "redundant" are wholly appropriate where the same thing has been posted ad nauseum, even when no ocurrance at all of it is found within the current story.

  78. International Virus by triso · · Score: 1
    "Britney Spears, Bill Gates, Jennifer Lopez, Shakira, Osama Bin Laden, Michael Jackson, Bill Clinton, Anna Kournikova, Paris Hilton, and Pamela Anderson."


    What an upstanding group of celebs. True role models for our children. However, it is very much oriented to North Americans. Surely there must be different names for other parts of the world. For the UK:

    1. Prince Harry -- Smoking pot with Neo-Nazis.
    2. Blair and Bush -- Written apology to Iraq. Troops To Go.
    3. HRH Brenda -- Dysentery cuts Indian tour short.
    4. Crazy Frog -- Deported.
    5. HRH The Duke of Edinburgh -- Gets slitty eyed at the local pub.
    6. etc., etc.

  79. Now when someone... by AvatarofVirgo · · Score: 0

    ... gets infected it puts a whole new meaning to "ops I did it again".

  80. Not just the Market by AvatarofVirgo · · Score: 0

    Although marketshare does affect which target gets targeted the most by viruses and other shitware, it's not the rule. Some OS's are more secure then others out of the box.

    I would say the security of any one system is based on more then one factor, mostly being the OS, the shithead between the "chair and key board" and where that OS stands on the market.

    There are probably other factors, point is the market alone doesn't determan the exploits of a system.

    1. Re:Not just the Market by toddestan · · Score: 1

      Well, the typical computer user is going to want Bonzi Buddy or Weatherbug for their Mac just like they do for Windows. And when the installer asks them for their Admin password, the typical computer user is just going to hand it over. Even if they don't hand it over (say, they don't know it, like in a corporate setting), the installer can still infect their user space. Or try a local exploit to get root access (which they have been few for the Mac).

      OSX is certainly more secure against worms and drive-by spyware installs. But social engineering is still going to work. I might even say OSX users might be a little more at risk, as their platform has not really been targetted yet - luring them into a false sense of security.

    2. Re:Not just the Market by AvatarofVirgo · · Score: 0

      I don't know what Bonzi Buddy is but as for Weatherbug you can use Kontact to see your weather. Actually I think it's called Kweather or some thing, I forgot what package it's in, but it integrates with Kontact.

      If you consider all the packages you get with say SUSE there should be at least most programs to satisfy most home users that they don't need those programs you mentioned.

  81. ASCENDING order, not descending by Anonymous Coward · · Score: 0

    Britney Spears is the one to recently edge out Bill Gates as the top virus celebrity. The top 10 (in descending order): Britney Spears, Bill Gates, Jennifer Lopez, Shakira, Osama Bin Laden, Michael Jackson, Bill Clinton, Anna Kournikova, Paris Hilton, and Pamela Anderson.

    If Britney Spears is #1, and she is first on your list, it's ASCENDING order.

    You need work with SQL more. (Or possibly less)

    1. Re:ASCENDING order, not descending by chawly · · Score: 1

      As a "YES FRANCE" person, I've got to say that this whole thing worries the hell out of me. Now that I think about it, I can't think why. If the idea was to worry "Yes France" people though, your post is really good. Have a really good day anyhow

      --
      How many beans make five, anyhow ? ... Charles Walmsley
  82. Nope, sorry, not a winner by ianscot · · Score: 1
    No idea who the Irish comedian you allude to might be.

    I assure you, having endured that ham-fisted and incredibly obvious song more than I cared to, that my own spontaneous simple reaction was: this person does not "get" irony. The tedious "Not!" thing -- irony for the irony impaired, circa late 1980s -- had a far better idea of what irony is and does.

    Your numbered list, incidentally, does absolutely nothing for me. And yes, I understand the points you're making, but I don't agree that they apply.

    The song is lame pop, and it missed the mark.

    --
    "Fundamentalism" isn't about divine morality. It's about human authority.