Slashdot Mirror


EC Watching Microsoft Security Moves

Rob writes "The European Commission is looking into Microsoft Corp's recent moves into the desktop security market, according to Symantec Corp, one of the companies that stand to lose the most if Microsoft leverages its monopoly to compete. We've not filed any official complaint," a Symantec spokesperson said. "We've responded to a request for information from the European Commission... we were not proactive, they came to us." Microsoft announced last week that it will offer an enterprise desktop security package comprising antivirus, antispyware, firewall and centralized administration. That's in addition to its OneCare consumer offering, currently in beta."

206 comments

  1. This is just laughable by schestowitz · · Score: 4, Insightful

    How about making an O/S that is secure to begin with? Charging people or supplying add-ons to fix one's own problems?

    --
    My Linux - (L)ove (I)s (N)ever (U)tterly eXPensive
    1. Re:This is just laughable by Anonymous Coward · · Score: 5, Insightful

      Exactly.

      Microsoft's new anti-virus/anti-spyware should be called "Windows XP SP3" and it should be free. We didn't pay for software that almost works.

    2. Re:This is just laughable by AviLazar · · Score: 0, Troll

      How about modding the parent for what it really is, overrated. As time has proven (i.e. FireFox) it is not that MS is inept, it is that the most popular program has more people hacking it. People said that IE sucked, and FireFox was the answer...now we are finding out that FireFox has a lot of exploits available to discovered.

      Be fair and act intelligent, instead of being a "Yes (wo)man" Complex programs are prone to have loopholes that people can exploit; it's a amazing in the first place to get a 300+ meg program to work, and do it with a ton of other programs.

      --

      I mod down so you can mod up. Your welcome.
    3. Re:This is just laughable by LurkerXXX · · Score: 4, Insightful

      If it's worms, etc, that take over your whole system, then yes, tehy should. The problem is a lot of malware these days are things people deliberately install on their maachines, through websites or email attachments. Securing the OS so that they can't take over the whole machine is good, but they can still trash the user data which is really the important thing on the machine. Add-ons like this are still needed to protect the users data files from dumb things the user installs/runs, even if the underlying OS is protected.

    4. Re:This is just laughable by Savage-Rabbit · · Score: 3, Insightful

      How about making an O/S that is secure to begin with? Charging people or supplying add-ons to fix one's own problems?

      Since when has Microsoft elected to do things the easy and efficient way when they can do things the really complicated and inefficient way? From my point of view it is really kind of funny that they might now get into trouble with the EU because they are trying to muscle into (and probably kill off) an industry that largely owes its existence to Microsoft's incompetence and its long-standing reluctance to fix the gaping security holes and design flaws in it's own operating system.

      --
      Only to idiots, are orders laws.
      -- Henning von Tresckow
    5. Re:This is just laughable by British · · Score: 5, Insightful

      And if MS released Vista WITH the fixes, thus rendering antivirus sw/anti-malware sw obsolete, people on here would complain about "WHY do I have to pay for this upgrade to fix the problems they didn't in previous versions?!?". It seems with this situation, MS is damned if they do, damned if they dont. Damned if they do: Accused of trying to leverage out Symateic, damned if they dont: blasted for insecure OSes. Damned if they do pt 2: Put fixes in Vista software, and are accused of trying to gouge customers out of more money for an upgrade.

    6. Re:This is just laughable by FidelCatsro · · Score: 2, Insightful

      That's not really the issue .
      one of the issues is that they are going to be charging people to protect them from their mistakes .
      Also in doing so MS creates a situation where creating a bug free product will lose them profits .
      Not to mention the fact that they can leverage their position to gain dominance in the market and wipe out the competition

      --
      The only things certain in war are Propaganda and Death. You can never be sure which is which though
    7. Re:This is just laughable by Anonymous Coward · · Score: 0

      Firefox is free. Use at your own risk. Windows is not. It really is that simple. If you pay for it, it should work. If not you've been sold a defective product.

      Why is Microsoft not liable for their bugs?

      If Windows Vista corrupts all of your data upgrading from XP, all the while Microsoft advertises a safe upgrade path, do you think there should be a recall? How big does the bug have to be before they are liable for the damage it does?

      Everything you mention about complex programs I could say about the internal combustion engine. It doesn't give the auto makers free reign to make exploding cars, however.

    8. Re:This is just laughable by AviLazar · · Score: 1

      Your assuming MS is going to charge for this...they might give it for free like their anti-spyware program. Also, even if the do charge for it -- guess what, symantec also charges...either way I got to pay. And MS is not totally to blame for people exploiting it....and if you want to say MS sucks because it has exploits, then you better say that the Mozilla foundation sucks because it also has exploits.

      --

      I mod down so you can mod up. Your welcome.
    9. Re:This is just laughable by Anonymous Coward · · Score: 0

      Yup... you pretty much have it figured out. M$ is damned.

    10. Re:This is just laughable by Chris+Burke · · Score: 4, Insightful

      It seems with this situation, MS is damned if they do, damned if they dont. Damned if they do: Accused of trying to leverage out Symateic, damned if they dont: blasted for insecure OSes. Damned if they do pt 2: Put fixes in Vista software, and are accused of trying to gouge customers out of more money for an upgrade.

      See what happens when you write shitty, insecure code and do nothing to try to fix it until several years after it is a major problem? Sorry if I'm not gushing with sympathy for this horrible situation they put themselves in.

      --

      The enemies of Democracy are
    11. Re:This is just laughable by m50d · · Score: 4, Insightful

      If you ship a shoddy product you deserve to be in a damned-if-you-do damned-if-you-don't situation. It's more damned-for-shipping-an-insecure-os-in-the-first-pl ace.

      --
      I am trolling
    12. Re:This is just laughable by qkslvrwolf · · Score: 1
      Classic FUD.

      Firefox has vulnerabilties, yes, but they tend to be:
      1) Patched Faster
      2) Less critical
      3) Patched completely
      4) Openly admitted to

      --
      Or have you only comfort...that stealthy thing that enters the house and guest then becomes host, then master - KG
    13. Re:This is just laughable by Verteiron · · Score: 4, Funny

      If you are running a legal copy of Windows then you did, in fact, pay for software that almost works.

      --
      End of lesson. You may press the button.
    14. Re:This is just laughable by Deathlizard · · Score: 3, Interesting

      Microsoft Could easily secure Windows to the point that no malware could infect the machine. You wouldn't like it, however, because you wouldn't be able to do anything on it other than browse the web. Want to install that Program? Sorry, it's not digitally signed! Like that Desktop Wallpaper? Sorry, but it's a Jpeg so it could have a Virus! ETC. If you want a Truly secure OS which doesn't need any type of protection, then you want Palladium. Simple as that.

      On the other hand, Not having a secure OS means that now you have to deal with Joe Stupid installing everything Bob Ignoramus sends to him, because Bob Ignoramus would never send Joe Stupid a virus. No Sirree. Now in Joe Stupid's mind. All he sees is PAM_ANDERSON_NUDE_ON_THE_BEACH.JPG.EXE, and thinks to himself, "I wanna see that, and I'm going to click Yes on this big red box that says that this could be a virus, and I'm going to click yes on this other big red warning that says that it isn't signed, and I'm going to put my Admin Password in this box that says I need admin rights to run this file, and HEY it's not Pam Anderson, it's Paypal telling me to enter my password since my account expired, How Nice of them to remind me So I better do that, and Hold Up! This damn Punch the monkey Ad keeps coming up and my machine is running slow for some reason!!!"

      Basically, Since Locking the machine Down isn't a good solution, and there's no security patches for the human brain yet, the easiest way to increase security without restricting the PC to the point that it's useless is have these addons to Stop Joe from being too stupid, but allow Joe to install Redneck Rampage Deer Hunter Extreme Machinegun Challenge when he feels like killing something. Frankly Why MS didn't have A virus scanner in XP is beyond me other than MS didn't want to hear Symantec Crying that their business they built on insecure Microsoft Os's is going away because Microsoft Suddenly decided to start securing their OS.

      Frankly, The only complaint about this Microsoft Anti virus is that they are going to have definition subscriptions like all the other anti virus apps instead of just turning their AV solution on by default on Vista and allow it to update without having to worry about expiring definition subscriptions.

    15. Re:This is just laughable by AviLazar · · Score: 1

      Classic FUD.
      Firefox has vulnerabilties, yes, but they tend to be:
      1) Patched Faster
      2) Less critical
      3) Patched completely
      4) Openly admitted to

      You wish it was fud. It is true, just because you don't like the truth does not mean it. There was an article, fairly recently, on /. showing that in the past month or so FireFox had more security holes found the IE. Me saying that IE is better then FireFox based on that assumption is fud, but I didn't say which program was better. I have said I prefer FireFox though.

      Oh and MS does admit to finding loopholes...generally after they fix it - and since they are closed source, I agree with this. Until something is fixed, why advertise it to people who would potentially use the exploit.

      --

      I mod down so you can mod up. Your welcome.
    16. Re:This is just laughable by tsa · · Score: 1

      MI>MS is not totally to blame for people exploiting it

      Yes, they should get a part of the profit other companies make on software that runs on Windows :-)

      --

      -- Cheers!

    17. Re:This is just laughable by Craster · · Score: 1

      Microsoft's new anti-virus/anti-spyware should be called "Windows XP SP3" and it should be free. We didn't pay for software that almost works.

      Riiiight - so they could then get their tits sued off by all the security firms for anti-competitive bundling of free products?

    18. Re:This is just laughable by Overly+Critical+Guy · · Score: 1

      And if MS released Vista WITH the fixes, thus rendering antivirus sw/anti-malware sw obsolete, people on here would complain about "WHY do I have to pay for this upgrade to fix the problems they didn't in previous versions?!?"

      Uh...no, they wouldn't. In fact, Microsoft finally fixing Windows and making it a truly secure system would be something Slashdot would post a front page article about and (most) people would praise. Yes, there would be complaints that it took them this long, which would be warranted.

      I think you're inventing a "damned if they do/don't" scenario here where there isn't one.

      --
      "Sufferin' succotash."
    19. Re:This is just laughable by Pecisk · · Score: 1

      What a hell you are talking about? Sorry, but there is NO excuse for Windows lack of security. Only Microsoft shills and some people who just don't want to bash and critize their beloved operational system can say that.

      Check out OS X! They have the best installation system ever - just copy that shiny vector-graphics based icon to your Applications folder, ENTER your password once and DONE!

      Please understand that User Friendly [tm] interface of Windows is NOT reason of their lack of security. Ignorance is.

      --
      user@ubuntubox:~$ stfu This server is going down for shutdown NOW!
    20. Re:This is just laughable by Anonymous Coward · · Score: 0

      And how many million+ lines of code have you written without any security holes? Hmmmm. Maybe, you are just like everyone else. Bitter and jealous that some young punk like Bill Gates could take a small company and revolutionize the computing world. Oh, and get rich doing it.

    21. Re:This is just laughable by Overly+Critical+Guy · · Score: 1

      All I have to say is, Macs are 15% of the computing install base, and yet OS X has not had a virus or trojan infection in the past five years. Such malicious software relies on the ability to propagate, and on Windows, such mediums are plentiful. OS X just doesn't have the infrastructure--no registry to exploit, no "interactive services" exploits, no ports open, and so forth. Malicious software gets stopped in its tracks to begin with.

      --
      "Sufferin' succotash."
    22. Re:This is just laughable by 6*7 · · Score: 1

      "Check out OS X! They have the best installation system ever - just copy that shiny vector-graphics based icon to your Applications folder, ENTER your password once and DONE!"

      How is this different from the windows situation depicted in the GP?

      You correctly state that ignorance is the problem, the users ignorance that is.

    23. Re:This is just laughable by bushidocoder · · Score: 1
      Macs are 15% of the computing install base,

      Where did you get that number from?

      Most tech analysts list Apple's market share in the US as about 3.6% as of June of this year - Apple claims higher, about 4.5% - if we give Apple the benefit of the doubt and assume they're 100% correct, you're still only talking about less than 5% in the US. Apple's worldwide numbers are approximately 1.8% market share.

    24. Re:This is just laughable by grimJester · · Score: 0

      Damned if they do: Accused of trying to leverage out Symateic, damned if they dont: blasted for insecure OSes. Damned if they do pt 2: Put fixes in Vista software, and are accused of trying to gouge customers out of more money for an upgrade.

      How about acting like any other business and fixing a flawed product for free? Poor Ford, damned if charge you extra for installing brakes that work, damned if they offer to sell you a new car.

    25. Re:This is just laughable by Pecisk · · Score: 1

      Because allows unitended installs in first place. It is HUGE difference. With Windows, I'm simply not sure what it will do automaticly next - even if I don't want it.

      Problem is Microsoft ignorance in first place - if you do user friendly usability, then do it, checking all other things - security, stability, etc. Sorry, but there is no excuse that Microsoft marketing dep. have too much power over developers.

      --
      user@ubuntubox:~$ stfu This server is going down for shutdown NOW!
    26. Re:This is just laughable by Chris+Burke · · Score: 2, Interesting

      And how many million+ lines of code have you written without any security holes? Hmmmm.

      I hope that "Hmmmm" is you thinking about the difference between any security holes and many security holes. "The inevitable existence of bugs means all software is equally vulnerable" is such a ludicrous argument it only makes sense if you don't think about it at all. That said:
      1) I guarantee I produce fewer security holes than the guy who thought automatically running VB scripts in the preview pane of Outlook was a good idea. I wouldn't have had VB script in email at all... but I forgot design decisions don't matter because all software has bugs.
      2) If I wrote the software that helped make "Melissa" a household name, I would have made security my top priority the next day, rather than years later.

      Maybe, you are just like everyone else. Bitter and jealous that some young punk like Bill Gates could take a small company and revolutionize the computing world.

      You mean everyone else who doesn't buy into the MS revisionist history? The revolutionaries were IBM with the PC and Compaq with their reverse engineered BIOS that created the clone market. MS did have the good fortune and accumen to be at the right place at the right time, but just about any other OS could have been used instead with the same result, and probably would have been better too. MS revolutionized nothing.

      Oh, and get rich doing it.

      The lesson? Monopolies are more profitable than quality products.

      --

      The enemies of Democracy are
    27. Re:This is just laughable by Loc_Dawg · · Score: 1

      Windows is sercure. It's even more secure than I thought! I just read in the Pakistan Daily Times.

      http://www.dailytimes.com.pk/default.asp?page=stor y_10-10-2005_pg6_7

      Is Steve Ballmer licking his lips?

      --
      _signature creation failed.
    28. Re:This is just laughable by Deathlizard · · Score: 1

      First off,

      Check out OS X! They have the best installation system ever - just copy that shiny vector-graphics based icon to your Applications folder, ENTER your password once and DONE!

      Joe Stupid: "Gee this fine Pam Anderson file that Bob sent me is going to be great! But it needs installed. Well, Let me drag this Nice Shiny Vector-graphics based icon to my Applications folder, type in my password, and HEY it's not Pam Anderson, it's Paypal telling me to enter my password...."

      If you notice, the example I gave in the grandparent is (outside of the filename I gave for effect) OS agnostic. It doesn't talk about browsers, or Specific security, or focuses on simply windows. Just about every OS has a hierarchy of steps that try to warn you, and many of the operating systems out there have ways to bypass that security.

      I'm not saying that Microsoft doesnt have things to fix, but not everything can be fixable without either Shock treatment, or total lockout. Simply put, you cannot underestimate the stupidity of the common computer user. It will always bite you back.

    29. Re:This is just laughable by silverdr · · Score: 1

      It seems with this situation, MS is damned if they do, damned if they dont.

      That's what they deserve, after all, don't they? ;-)

      --
      Now, mod me down freely. My karma can't get any worse...
    30. Re:This is just laughable by Anonymous Coward · · Score: 0

      Damned if they do? Not if they maken the product a regular software package that you have to pay for just like those of the competition. i don't see the problem (aside from the fact that is really ironic and kind of sad that it has to be this way).

    31. Re:This is just laughable by Anonymous Coward · · Score: 0

      And if MS released Vista WITH the fixes, thus rendering antivirus sw/anti-malware sw obsolete, people on here would complain about "WHY do I have to pay for this upgrade to fix the problems they didn't in previous versions?!?". It seems with this situation, MS is damned if they do, damned if they dont.

      Look, this has been discussed on /. for a looong time. These are NOT new issues. Microsoft has known about security issues for a looong time. But rather than fix such issues, Microsoft has always treated this as a money-maker by requiring people to purchase upgrades that are supposedly more sfae. Unfortunately, they never have been. And, when customers discover that the new product is unsafe, well, another infusion of cash for the next version will fix that, won't it? NO!

      This is the single biggest reason for not depending on proprietary software products: it always costs more to fix known problems, the liability issues are essentially nil and the dealers of proprietary products have no incentive (in fact every incentive not) to release stable, secure products!

      When will Microsoft be held liable for the quality of their products? That would fix most all of these problems before they were problems. And, admittedly, Symantec wouldn't be in existence at all, because Microsoft might have had a vested interest in preventing the holes that made them possible in the first place!

    32. Re:This is just laughable by falconwolf · · Score: 1

      You wish it was fud. It is true, just because you don't like the truth does not mean it. There was an article, fairly recently, on /. showing that in the past month or so FireFox had more security holes found the IE. Me saying that IE is better then FireFox based on that assumption is fud, but I didn't say which program was better. I have said I prefer FireFox though.

      The link provided was about that same article you mention was recently posted on /.. In the article on Semantec's release it says there were more vulnerabilities in Firefox than in IE but here's the key: "Symantec's talking about only those vulnerabilities that the vendor confirms, not all of the publicly known vulnerabilities that are out there." So MS confirmed less vulnerabilities than Firefox but it doesn't mean it is more secure. It continues with "Microsoft is well known to be tone-deaf to independent security researchers." Appearently MS won't confirm all vulnerabilities, whereas Firefox confirms more. Now who's more trust worthy, someone who hides or won't acknowledge problems or someone who does acknowledge them?

      Falcon
    33. Re:This is just laughable by drsmithy · · Score: 1
      How about making an O/S that is secure to begin with? Charging people or supplying add-ons to fix one's own problems?

      It is not difficult to run a secure Windows machine.

    34. Re:This is just laughable by FidelCatsro · · Score: 1

      Yes but the Mozilla people are not trying to charge you for a work around, They don't have a monopoly and the vulnerabilities are less worrying than MSIE vulnerabilities

      --
      The only things certain in war are Propaganda and Death. You can never be sure which is which though
  2. MS wants to eat all by in-tech · · Score: 1

    the more you* become greedy. the more hungry you will be and OH you will have more hungry enemy to bite you. * microsoft

  3. Bloatware by sp3298622 · · Score: 5, Interesting

    First Adobe gets hit with integrated PDF creation in the new version of Word, and now Symantec is on the list of features Microsoft is going to incorporate in the next version of Windows. If there is anything they should have learned by now from the success of Linux, the benefits of allowing specialized developers creating software packages they know, understand and excel in doing properly, should have been clear to Microsoft by now. But I guess that's another thing that Microsoft think they can do better than anything else, what's new?

    1. Re:Bloatware by Evil+W1zard · · Score: 2, Insightful

      I'm not the biggest proponent of MS, but why should they learn from the success of Linux? They are a corporation and thusly are in the business of making money, and that business has been extremely good. Lets face it they make OS's and Apps for the masses. By including more security software in their portfolio they stand to make a nice profit and that is what drives the business.

      --
      News Reporters Make Tasty Polar Bear Treats!
    2. Re:Bloatware by sp3298622 · · Score: 1

      A good software company should set forward to make good software, and build a large satisfied customer base, who are willing to pay for the next release, this makes the company money and is good business practice. Including more security software is just a work-around , getting the software right the first time , or fixing it for the second time is good business practice. Leave the security bit to the people who know security and concentrate on what you are suppose to make - a secure operating system.

    3. Re:Bloatware by Anonymous Coward · · Score: 0
      Posting as AC because I moderated.

      It doesn't matter how secure you make an operating system, people are going to see "BRITNEY SPEARS SEX MOVIE.MPEG.EXE" and run it. The main problem with Windows security these days is in fact the people using it, who elect to turn off the firewall, virus scanning, etc. The only way you can fix this is to force people to run as a normal user. Part of the Windows Logo test requires that your software be able to run as a normal, non-priviliged user without any hitches. So, if you do this and only run Microsoft certified applications, you're fine. The second you try to throw in something like Intellisync for your Palm or BlackBerry, you're screwed into running as administrator because the company developing Intellisync is incompetent.

      I've seen someone get a warning from PC-Cillin saying "This is a virus" and blocking access. This person then went to disable the virus scanner "so it wasn't a virus," and then ran it. The major underlying problem we have is people who are clueless. If Linux became the major platform, I'm sure as hell you'd see average uninformed users running as root because they want it to be easier to install programs and do other tasks without entering their password again. And with that happening, you'd see viruses become more prominent for Linux as they won't need to social engineer the average user into running it.

      I'm not saying Microsoft has security down, because they don't. If you've read anything they're doing with Vista, without the Slashdot groupthink in which everyone thinks about the DRM and nothing else, you'd see they're making some serious changes to the way they approach the OS. So why do you blast them for having an insecure OS, then blast them for trying to make it more secure? It's hypocracy at its finest.

    4. Re:Bloatware by Ucklak · · Score: 1

      One of the differences in Linux is that if/when you do run as root, your library path is different and/or limited.

      I can't run apachectl -t as a user unless I /sbin/apachectl -t
      Likewise, I can't run quake3 as root.

      Why not apply the same methodology to a Windows environment?

      --
      if you steal from one source, that is plagiarism, if you steal from many, well, that's just research.
    5. Re:Bloatware by milimetric · · Score: 1

      Awesome post. Here's what I take from it. Symantec and Adobe should get behind Linux. Seriously. In Linux, Symantec can contribute their expertise at the KERNEL level instead of in the weak application domain. Application domain security is like using the "optional" decorator pattern to implement security when coding an app. It's gotta be a tight kernel that doesn't allow code to execute unless the user specifically says I want to execute this code and I want it to have priviliges [up to] my own priviliges. So, Symantec, Adobe, all those foresaken by Microsoft, come, join the Open world

    6. Re:Bloatware by value_added · · Score: 1

      First Adobe gets hit with integrated PDF creation in the new version of Word, and now ...

      Actually, in the Real World(TM), the first thing a user learns when trying the Word->PDF "conversion" is that it's (to paraphrase) like a dog walking on it's hind legs. It's not done very often, and when it is, it's not done very well. The second thing they learn is that Word has trouble making up it's mind whether it wants to try and be be a word-processor or a desktop publishing program.

      I doubt Symantec has anything major to fear. Historically, Windows has been full of applications that are typically replaced with third-party alternatives. Even licensed crippled versions of software (Diskkeeper, for example) that's included isn't worth using. This may not be true to the same degree with uniformed users, but it's easy to see how even a clueless newbie would be easily swayed by advice like "Use Symantec AntiVirus. It's the Real Thing(TM)."

    7. Re:Bloatware by Frit+Mock · · Score: 1


      Waht do you think a stumbling giant will do? ... probably he will try to hold on something. And if it breaks, than the giant might not fall that hard ... he thinks.

      The new situation is, that there is no longer a common perception that MS products are ahead of their competitors (incl. some OSS projects.) MS falls behind in features/functionality/security/stability/usabilit y and is obviously trying to catch up.

      It has nothing to do, with MS believing, that they can do it better. It has to do with MS trying to maintain its dominition on the software-market.

      Adobe, Symantec or whoever can't compete in any way against a "zero price" strategy from MS ... as a matter of fact, MS is doing hard in establishing a seperate new product that tries to comete on a fair basis. They just bundle anything with their two warhorses Windows and Office ... browsers, mediaplayers, AntiVirus in the OS ... PDF, (cripled) OpenDocument and many more such Features in Office.

      The news is ... the EC will keep an eye on MS ... some more advice from the EC how MS has to "shape" their products is on the way ... and maybe even some more fees ...

    8. Re:Bloatware by KarmaMB84 · · Score: 1

      Where they are worried about is the people that got 45 day trial versions of Norton with their PC (and it shouldn't be in the OS when it's shipping pre-insalled?) and usually end up getting a subscription after being trashed by a virus when their copy expires and isn't updated. If they don't get a trial copy because MS is protecting them and forcing the signature updates on them through WU, why would they pay for subscriptions?

    9. Re:Bloatware by Lally+Singh · · Score: 1

      Check out the growth curve on their stock -- it's been flat for years. The company hasn't been going anywhere for a _looong_ time.

      --
      Care about electronic freedom? Consider donating to the EFF!
    10. Re:Bloatware by I'm+Don+Giovanni · · Score: 1

      Uh, and how would Symantec and Adobe make money by "getting behind Linux", whose users don't believe in paying for software and demand that devs open source their code?

      This statement of yours is very telling:" In Linux, Symantec can contribute their expertise at the KERNEL level instead of in the weak application domain."
      That's what it always comes down to for Linux folk. Commercial dev houses should "contribute" but get nothing in return (i.e. payment).

      --
      -- "I never gave these stories much credence." - HAL 9000
    11. Re:Bloatware by wiredlogic · · Score: 1

      First Adobe gets hit with integrated PDF creation in the new version of Word
      And Apple has PDF creation integrated into its entire GUI environment and clipboard... Scandalous.

      --
      I am becoming gerund, destroyer of verbs.
    12. Re:Bloatware by ckaminski · · Score: 1

      Something that OSes need, is sandboxing. You install program a in /sandbox/app. Can even run as root but any changes to the system get throw out when /sandbox/app is removed.

      Hell, after personally working with my father's SOHO for a while, I'm convinced EVERY app needs to be sandboxed.

  4. What's the Fuss? by putko · · Score: 4, Insightful

    This issue -- MS moving into the security market -- has always struck me as a non-issue.

    If MS just did their job and made a secure OS, like OpenBSD (or the other BSDs), there wouldn't be a huge market for security band-aids.

    E.g. suppose MS began to apply formal methods, semi-formal methods, code reviews and so on in an effort to eliminate sources of insecurity -- yet did not sell a single "security" product. Not even a Snort.

    Would the EU then claim that MS was taking away their oxygen supply of the "security" band-aid selling companies?

    --
    http://www.thebricktestament.com/the_law/when_to_s tone_your_children/dt21_18a.html
    1. Re:What's the Fuss? by div_2n · · Score: 1

      If MS fixed their shoddy product so that these kinds of products wouldn't be needed, that would be one thing. But to sell or especially give away this kind of software that is being sold by a third party is beyond dirty.

      Selling is dirty because it is a band-aid to their inability to produce a secure product. Giving away is dirty because that is leveraging their monopoly to supplant another company.

      Fixing their product issues is the only route that would be right thing to do.

    2. Re:What's the Fuss? by FidelCatsro · · Score: 1

      In doing so they are creating a financial incentive to not fix problems .
      Products are there to fill demand , If you remove the need then you remove the demand. In that case there is no problem.

      --
      The only things certain in war are Propaganda and Death. You can never be sure which is which though
    3. Re:What's the Fuss? by Daedala · · Score: 1

      I believe that it's an issue, not because I think Symantec deserves a break, but because I think profiting from one's own security flaws results in even worse security. (That's a nice OS you got there, eh? Shame if something were to...'appen to it.) If all of this were free and guaranteed to stay that way, it would bother me less. I still think it would be security band-aids, and not helpful in the long run, but not actively evil.

      --
      What I say does not represent the views of my employers, my friends, my cats, or myself.
    4. Re:What's the Fuss? by hackstraw · · Score: 1

      If MS just did their job and made a secure OS, like OpenBSD (or the other BSDs), there wouldn't be a huge market for security band-aids.

      Ah, but many believe that MS does more with their os than make a secure one and remind people of it.

      Want to look at a secure desktop (that is BSD based), take a look at OS X, and it does more than be secure to boot.

    5. Re:What's the Fuss? by 99BottlesOfBeerInMyF · · Score: 3, Insightful

      E.g. suppose MS began to apply formal methods, semi-formal methods, code reviews and so on in an effort to eliminate sources of insecurity -- yet did not sell a single "security" product. Not even a Snort. Would the EU then claim that MS was taking away their oxygen supply of the "security" band-aid selling companies?

      No, because their is a fundamental difference between improving an existing product in a market where you have a monopoly and using that existing monopoly to move into a new market. The first is legal, the second is not. If MS improves their OS so that it uses no electricity, that is fine. It has made the product better, and while this will have an adverse effect upon electricity sales, it does not move MS into the electricity market by leveraging their existing monopoly. That is the part the law objects to, because that is the dangerous part of a monopoly and one that removes all the competitive benefits of a free market. What MS cannot (legally) do is start to give away electricity for free with copies of their OS or bundle it in any fashion.

    6. Re:What's the Fuss? by Anonymous Coward · · Score: 0

      To me, this sounds like extortion.

      "That's a mighty fine window you have here... sure would be a shame if someone threw a brick through it. We could protect you from such vandalism for a small fee."

  5. It seems Microsoft is in a lose-lose situation... by Pichu0102 · · Score: 1

    If they add security measures to their system, already existing security companies will call them a monopoly and sue them, whereas if they don't, customers will get angry at Microsoft for not including everything in there for them and will switch to other systems.

  6. Dammed if they do... by johneee · · Score: 1

    I do find it funny that after years of badgering by the community MS is finally doing something about security and they're getting in trouble for it from the EU.

    I mean, they could have just made their system more secure, and while that probably would have impacted Symantec's business as well, they wouldn't have been in doodoo about it, but we take what we can get I suppose...

    --
    - ------- There are ten kinds of people in the world. Those who understand binary, and those who... Huh?
    1. Re:Dammed if they do... by Foofoobar · · Score: 2, Insightful

      Actually, that's not really doing something about security... it's a bandaid. Fixinf their OS would handle most security problems. Not integrating their products into the OS would fix the other half.

      Slapping anti-virus and anti-spyware tools on top of it is just a bandaid and another excuse not to fix the inherent flaws in the OS.

      --
      This is my sig. There are many like it but this one is mine.
    2. Re:Dammed if they do... by Jikrschbaum · · Score: 1

      It is inevitable. Fact is currently MS is the BMOC as far as OS on Desktops. They are the target that gets hit most often, and unfortunately a majority of users see AV as something that should just be there, like sewers and trash service. How many times have you seen a friends system with Norton running on it with virus defs from 3 years ago. Those are the people that always scream the loudest when they get hit with a bug. I may not support all that MS does, but this is one that needs to be. A basic AV included with the OS that helps stave off massive outbreaks. The people that this will really benefit are the same ones that never bought an AV package before. So really no money lost for any of those folks. The rest of us will continue with our preferred AV as always.

    3. Re:Dammed if they do... by AviLazar · · Score: 2, Informative

      Symantec, their product, went crappy a long time ago. I had used it since it was Dr. Norton; and years ago it would have itself shutdown by exploits (i tolerated this)....then when i got anti-virus 2005 it would constantly shut down, corrput my (brand spanking new dell laptop), etc. I finally switched to CA ezTrust. Symantec has gone down hill.

      And it is responsible, very responsible, of MS to offer anti-virus in their OS.

      --

      I mod down so you can mod up. Your welcome.
    4. Re:Dammed if they do... by Foofoobar · · Score: 1

      Responsible? Wouldn't responsible be defined as fixing critical security holes that have been open for over 2 years? Wouldn't responsible be not integrating the browser into the OS? Wouldn't responsible be not running all applications as root?

      You have a wierd definition of responsible my friend. Personally, I'd find it more responsible of them to fix inherent problems with the OS. The 'band-aid' of the antivirus system is nice but by no means is it a permanent fix. Still, this is the way Microsoft will pitch it and then go right back to sitting on all those critical security holes.

      --
      This is my sig. There are many like it but this one is mine.
    5. Re:Dammed if they do... by AviLazar · · Score: 2, Insightful

      Wouldn't responsible be defined as fixing critical security holes that have been open for over 2 years

      I cannot comment about this because I am not familiar with the internal working's of this issue and MS, and unless you work for MS (directly) neither are you.

      Wouldn't responsible be not integrating the browser into the OS

      That's a matter of opinion...While I use FireFox, I am happy that IE comes with my computer - you know, so that way I can get on the Internet for the first time and download me a copy of firefox.

      Wouldn't responsible be not running all applications as root?

      I'm pretty sure not all applications are run as root

      Personally, I'd find it more responsible of them to fix inherent problems with the OS. The 'band-aid' of the antivirus system is nice but by no means is it a permanent fix

      You, as well as everyone else here, knows that the band-aid method is the best method. With millions, and billions of lines of code it is impossible, even for a large organization like MS, to find every loophole...point in case, FireFox - as it is gaining more popular, more loopholes are being found - and what is Mozilla doing? They are band-aiding it up. See every company utilizes that method - it's called a patch, and they have been around for as far as I can remember, and I have been using computers all the way back since commodore 64 and 386 pc clone.

      --

      I mod down so you can mod up. Your welcome.
    6. Re:Dammed if they do... by Foofoobar · · Score: 1

      Actually you can comment on it as Symantec and others have mentioned this several times. They often comment about how it takes them 6 months to even acknowledge that the hole exists.

      Second, having the browser integrated into the OS has made many non-critical holes even more critical as a result. Not opinion when every security agency tells you to dumb IE because of it's threat to your OS.

      Yes, by default, all applications run as root. In XP, they tried to fix this but it causes issues with several programs so the default is STILL to run as root (or more precisely as SYSTEM which has unlimited privileges)

      And I'm afraid I disagree. When your roof is leaking, a bucket is not a permanent fix. Yopu fix the roof so you don't need the bucket. Maybe in your house, you like having a whole bunch of buckets around but not me.

      I say if it's broke, fix it.

      --
      This is my sig. There are many like it but this one is mine.
    7. Re:Dammed if they do... by AviLazar · · Score: 1

      Actually you can comment on it as Symantec and others have mentioned this several times. They often comment about how it takes them 6 months to even acknowledge that the hole exists.

      I am not sure who others is, but I raise an eyebrow to a competitor neigh-saying it's competitor. I am not saying they are wrong either, but again, there is a difference of view from the outside then the inside.

      Second, having the browser integrated into the OS has made many non-critical holes even more critical as a result. Not opinion when every security agency tells you to dumb IE because of it's threat to your OS.

      As I have said before, having the browser integrated allows me to go online and get hte browser that I want to use...and guess what, I don't have to worry about IE anymore - that is unless Mozilla distributers are including viruses in their version of firefox...oh wait.

      And I'm afraid I disagree. When your roof is leaking, a bucket is not a permanent fix. Yopu fix the roof so you don't need the bucket. Maybe in your house, you like having a whole bunch of buckets around but not me.

      When my roof leaks, the bucket is a temporary fix until the roofer can come and fix it. Also, if my roof has a hole that is prone to a leak, but it doesn't rain until November - well I guess I won't know until november. So cut MS some slack here, they are trying - really they are. i.e. Giant Anti-spyware --- last I heard MS didn't invent this spyware.

      --

      I mod down so you can mod up. Your welcome.
    8. Re:Dammed if they do... by Foofoobar · · Score: 1

      Symantec, CERT are just two who have been saying this long before Microsoft ever became a competitor and to date, Microsoft is still NOT a competitor because they have YET to launch a product. How are you able to label them as a competitor when they have yet to even enter the race? And regardless, these are things that have been said for the last 5 years... not recent news. Even if Microsoft is considered a competitor without even launching a product, how do you explain that it's been being said for years. Not only by security experts but also by foreign nations, IT depts at schools, and even the US government and dept of homeland security. Ibn fact, you'd be hard pressed to find someone aside from Microsoft saying the opposite.

      And I'm sure that having the browser integrated is a nice convenience but there are ways to do this without have all commands be passed straight through the kernel. Several past security holes were a direct result of this and several unconfirmed and still open ones are a direct result of this as well. For examples, go to CERT and look through their listings for IE. The facts speak for themselves.

      Rigght, viruses only strike in November. Zero day viruses and exploits have already been proven to exist in the wild but for you, because you are running on Microsoft, they'll wait until November to hit you. Even speaking metaphorically, your argumen doesn't make sense.

      --
      This is my sig. There are many like it but this one is mine.
    9. Re:Dammed if they do... by danaris · · Score: 1
      As I have said before, having the browser integrated allows me to go online and get hte browser that I want to use...and guess what, I don't have to worry about IE anymore - that is unless Mozilla distributers are including viruses in their version of firefox...oh wait.

      Um, no. Having the browser BUNDLED allows you to go online and download Firefox. And Microsoft could just as easily include IE, Firefox, Mozilla, and Opera as co-equal browsers on the default install, and let you pick your favourite the first time you boot the system.

      Do try and get your terminology straight, mate. There's a BIG difference between bundled and integrated--one's just somewhat monopolistic, the other is monopolistic, insecure, and really, really dumb.

      Dan Aris

      --
      Fun. Free. Online. RPG. BattleMaster.
    10. Re:Dammed if they do... by AviLazar · · Score: 1

      Um, no. Having the browser BUNDLED allows you to go online and download Firefox

      I am pretty sure I said this, wait let's see "As I have said before, having the browser integrated allows me to go online and get hte browser that I want to use"....yea that's what I said... so why are you disagreeing with me?

      And Microsoft could just as easily include IE, Firefox, Mozilla, and Opera as co-equal browsers on the default install, and let you pick your favourite the first time you boot the system.

      1) Isn't that bloatware? I mean, do I really want to jam four different browsers in my computer, make that five, we need to be fair to AOL...and hell there are more browsers, MS shouldn't discriminate - let's include Netscape and the rest.

      2) Why should MS have to support their competitors? Does Symantec have to include a copy of CA ezTrust, or McAfee? Does Half-Life 2 have to include a copy of Everquest 2? No...that is silly, really it is.

      Integrated and bundeled are different yes...one is built into the system, the other -- not necessarily. As for monopoly - I don't care what the court says (and you know they can make decisions based on political pressures). Monoply means there is ONE company. Windows is not the only OS, and people can just as easily get the others....OS X, all the Linux versions, IBM OS/2, Unix and it's variants, freeBSD and that's just to name some....also, the barrier to entry is minimal...you just need to have the programmers and capital to start advertising (assuming you are not giving it away).

      That's it

      --

      I mod down so you can mod up. Your welcome.
    11. Re:Dammed if they do... by drsmithy · · Score: 1
      Second, having the browser integrated into the OS has made many non-critical holes even more critical as a result.

      Oh, bullshit. IE is no more "integrated" into Windows than khtml is into KDE or WebCore is into OS X. It's simply a shared component that runs at the privilege level of the user. IE (or other apps using IE) can't do anything more than any other application like, say, Firefox.

      Yes, by default, all applications run as root. In XP, they tried to fix this but it causes issues with several programs so the default is STILL to run as root (or more precisely as SYSTEM which has unlimited privileges)

      More bullshit. Applications run at the privilege level of the user that starts them.

    12. Re:Dammed if they do... by drsmithy · · Score: 1
      There's a BIG difference between bundled and integrated--one's just somewhat monopolistic, the other is monopolistic, insecure, and really, really dumb.

      So the programmers behind KDE, GNOME and OS X are monopolistic, insecure, and really, really dumb ?

    13. Re:Dammed if they do... by danaris · · Score: 1

      Err...the only one of those that has the web browser integrated with the file system browser is KDE, so that's the only one that I would consider "insecure and really, really dumb." I guess I worded myself slightly injudiciously, though...either of the two is only monopolistic if done by--guess what--a monopoly.

      Dan Aris

      --
      Fun. Free. Online. RPG. BattleMaster.
    14. Re:Dammed if they do... by drsmithy · · Score: 1
      Err...the only one of those that has the web browser integrated with the file system browser is KDE [...]

      I think you need to do a lot of research about how KDE and Windows/IE work.

      Konquerer in KDE and Explorer in Windows are simply wrappers. They call various shared components depending on how they're trying to operate - so when you browse the web they load up the "web browsing component" and when you browse the file system they call up the "file management" component.

      This does not mean that they have "the web browser integrated with the file system browser" any more than being able to open PDFs inside Firefox means Acrobat is "integrated with" Firefox. It means they come with a shared component that provides certain web browser functions - just like OS X and GNOME do - and load them on demand.

    15. Re:Dammed if they do... by danaris · · Score: 1

      That's as may be, and you're right that I don't know the implementation details, but I would still say that making them the same program, so that you can type either a file system URL or an internet URL in the address bar, is not a good idea, even if only from a psychological perspective.

      Dan Aris

      --
      Fun. Free. Online. RPG. BattleMaster.
    16. Re:Dammed if they do... by Foofoobar · · Score: 1

      Actually if you take a look at your registry while trying to remove all references to IE, you will notice that your Explorer window can call a URL. This cannot be removed without crippling your system. You can remove all references to IE but Windows will still default to it's install of IE 4.0. Try it sometime. You will see just how integrated it is and you will spot several interesting items that allow yoyu SYTEMlevel access through the browser.

      --
      This is my sig. There are many like it but this one is mine.
    17. Re:Dammed if they do... by drsmithy · · Score: 1
      That's as may be, and you're right that I don't know the implementation details, but I would still say that making them the same program, so that you can type either a file system URL or an internet URL in the address bar, is not a good idea, even if only from a psychological perspective.

      My whole point is that they're *not* the same program - in any meaningful sense - any more than being able to open PDFs in Firefox mean Firefox and Acrobat are "the same program".

      Explorer is the Windows *shell*. If it doesn't make sense to have that sort of functionality in the *shell*, I'm not sure where you might think it makes sense to put it.

    18. Re:Dammed if they do... by drsmithy · · Score: 1
      Actually if you take a look at your registry while trying to remove all references to IE, you will notice that your Explorer window can call a URL. This cannot be removed without crippling your system. You can remove all references to IE but Windows will still default to it's install of IE 4.0. Try it sometime.

      How surprising, that the system shell uses the system-provided browser component...

      You will see just how integrated it is and you will spot several interesting items that allow yoyu SYTEMlevel access through the browser.

      Then you shouldn't have any trouble quoting them, and how to exploit them.

    19. Re:Dammed if they do... by danaris · · Score: 1

      It doesn't make sense (to me, at least, but I didn't grow up with Windows or KDE) to have the shell be able to accept a webpage URL just as easily as a local pathname. The Web is the Web, and webpages should be treated completely differently than directories or files on the local machine.

      If you want to add support for browsing NFS, SMB, AFP, FTP, or any other kind of file shares through the shell, that at least makes some sense. But not browsing the web.

      And saying that Internet Explorer is as much different from the Windows Explorer as Firefox is from its Acrobat plugin is quite disingenuous. The plugin is, well, a plugin, that you have to specifically install, and is clearly a separate piece from the application. IE tries its best to make the boundaries between your machine and the rest of the world disappear--particularly with the abomination that is Active Desktop.

      The point, in the end, is that if you can remotely exploit the browser, and the browser is that tightly linked to the shell, you have a problem.

      Dan Aris

      --
      Fun. Free. Online. RPG. BattleMaster.
    20. Re:Dammed if they do... by Foofoobar · · Score: 1

      Actually it is surprising because that same component can be accessed through your browser

      And if you wish to see examples, roll through CERT's security holes for IE. It lists several and even goes on to say on a couple of them that they are due to the browser being integrated.

      I'm not here to convince you since your mind is already made up. Just stating the facts for those who wish to be objective.

      --
      This is my sig. There are many like it but this one is mine.
  7. MS is undermining itself by revscat · · Score: 4, Insightful
    The fact that Microsoft can do this is just astounding. I understand their freedom within the marketplace, yes, but should their anti-virus segment prove profitable then they would then have a financial disincentive to fixing their security flaws that is directly proportional to the underlying success of their security product. This can be neither good for Windows nor the world at large.

    Microsoft: Spend your energies fixing the problems, not undercutting them! This seems to me like the smoker who uses asthma medicine to take care of his wheezing. It's a temporary fix, sure, but the larger problem remains.

  8. Uh Oh.... by 8127972 · · Score: 4, Funny

    ....I think someone is going to be throwing some chairs shortly.

    --
    This is my opinion. To make sure you don't steal it, it's covered by the DMCA.
  9. Wny Anti-Virus is an OS function by G4from128k · · Score: 4, Insightful
    As much as I dislike MS, I can see four arguments that antivirus is an OS function.

    1. A key function of an OS is to regulate, allocate, and manage the hardware and software resources of the machine. Controlling which chunks of code/processes/threads have access to which other chunks of RAM/filesystem/IO seems core to both an OS and to controlling malware.

    2. Anti-malware software needs to operate at higher level of privilege than the malware to avoid malware countermeasures. If the anti-virus is just another application, even if its at the admin level, its going to be vulnerable to being turned off by malware that explicitly tries to avoid detection and removal. Anti-virus needs to run at a privilege level above most user and admin processes. This puts it deep into the OS and should probably load before any 3rd party extensions or any form of networking stack.

    3. Malware often exploits holes in the OS. All jokes aside, the OS vendor is one of the most likely organizations to understand these vulnerabilities and make a semi-competent decisions on whether to patch the OS to close the vulnerability or use anti-malware to expunge or repel the malware.

    4. Defense against malware should be a default-feature of the OS, not an add-on. No car could be sold with bumpers, locks, and seat-belts sold separately. In an age of consumer PCs and botnets, it becomes part of the system provider's responsibility to deliver a "safe" product.
    --
    Two wrongs don't make a right, but three lefts do.
    1. Re:Wny Anti-Virus is an OS function by madhippy · · Score: 1

      like with the browser being part of the o/s argument of yesteryear ...

      MS only need to provide the hooks, not necessarily the full functionality ... MS could provide the hooks for av software, other vendors could supply the virus definition library, regular updates, nice ui etc

    2. Re:Wny Anti-Virus is an OS function by Bogtha · · Score: 1

      Controlling which chunks of code/processes/threads have access to which other chunks of RAM/filesystem/IO seems core to both an OS and to controlling malware.

      Not really. The OS manages processes/memory/etc. So long as it keeps them separate, it's done its job and antivirus software doesn't really have anything to do in that respect.

      Anti-malware software needs to operate at higher level of privilege

      Yes, but that doesn't mean it has to be built into the operating system. Example: drivers. They are supplied by third parties legitimately. They run with greater privileges than normal applications.

      Malware often exploits holes in the OS.

      So fix the holes.

      Defense against malware should be a default-feature of the OS, not an add-on.

      You are looking at this like it's a war, with two sides fighting against each other. This is a poor analogy, which leads to the incorrect assumption that an OS needs "defenses".

      Think of it this way: the malware is asking your operating system to do something. The correct response from your operating system is to not do it. That is all the "defence" that is necessary in an operating system - completely passive behaviour, without any extra code necessary.

      --
      Bogtha Bogtha Bogtha
    3. Re:Wny Anti-Virus is an OS function by tpgp · · Score: 1

      As much as I dislike MS, I can see four arguments that antivirus is an OS function.

      I see that you have thought of a fourth reason since you last posted this comment

      Glad to see you still dislike MS ;-)

      2) Anti-malware software needs to operate at higher level of privilege than the malware to avoid malware countermeasures. If the anti-virus is just another application, even if its at the admin level, its going to be vulnerable to being turned off by malware that explicitly tries to avoid detection and removal.

      Why do you have to be the operating system vendor to do this?

      --
      My pics.
    4. Re:Wny Anti-Virus is an OS function by miffo.swe · · Score: 1

      1. While i can agree on the first one i think the solution is to tighten the core OS, not apply a second layer to stop the exploits that shouldnt exist in the first place. Antivirus is just a band-aid solution for a deeper problem. If you can track malware you also probably knows why it got in in the first place. The OS vendor should be focusing on why theese malware get in in the first place. Anything a virus can do a hacker can do better and without detection.

      2. If you have antimalware detection operating at a high level it itself is suspectable to hacking. Its better to run it with read only priveliges and the ability to stop files from getting written or read. It should never have full rights to the OS. If you already have a virus its much to late. Cleaning and detecting viruses is really two different things.

      3. If you dont patch that hole you have an endless stream of different approaches to get into the same hole. The only solution is to plug the hole. Everything else is just a temporary solution.

      4.I cant but agree. But if you look at the Antivirus industry it has yet to come up with a solution that solves the problem. All it can do is solve each specific malware on its own. It does not save you from manual attacks or new attacks. Its just and endless subscription wich is what i think is the goal with antivirus solutions. As long as the OS vendor doesnt plug the holes youre stuck in an endless payola.

      --
      HTTP/1.1 400
    5. Re:Wny Anti-Virus is an OS function by kebes · · Score: 1

      I think most of us agree with you... it IS the job of the OS to provide protection against viruses, malware, etc. However, offering a virus-scanning program is not the right way to do it. Symantec (and others) provide anti-virus and anti-spyware programs to make windows more protected... they do this because they have no other way. They cannot sell a "patch" for windows that makes it secure and whatnot, so their only option is to sell software that runs like any other program, and watches for bad things and gets rid of them. Symantec has neither the source code nor the legal footing to make modifications to windows itself.

      Microsoft, on the other hand, can. The proper way to make an OS protected against viruses and malware is not to provide a little program that occasionally checks if the computer is infected: it is to design the architecture in such a way that infection is very difficult.

      Obviously having two levels of security is better (secure OS and then a virus scanner, for instance). However, while it virus-prevention is clearly an OS issue, the answer is not for the OS to be bundled with anti-virus software (or even to move anti-virus software from userland into the kernel or something)... rather, the OS should be secure enough that infection is quite unlikely. Then 3rd parties (or even the OS vendor if they want) can sell scanner programs for that "extra safety and security" if people need/want it.

      Others have commented on the obvious conflict-of-interest that is generated when an OS vendor makes money both from the OS, and then again from software that closes gaping holes in the OS's security. It should be investigated as a possible monopoly abuse.

    6. Re:Wny Anti-Virus is an OS function by starfishsystems · · Score: 1
      Sorry that I have to disagree with your argument in each of its points.

      A key function of an OS is to ... manage ... resources

      The point is illustrates a common misperception. Viruses are not system resources. They are bitstrings which strictly originate outside the system. As such, they're benign unless the system fails to provide for this distinction.

      Anti-virus needs to run at a privilege level above most user and admin processes.

      Not at all. Virus detection is strictly a pattern match, which can easily function at the application level.

      The OS vendor is ... most likely ... to understand these vulnerabilities

      This comment, while true, doesn't support your argument that virus detection belongs in the operating system. Ordinarily, a system is secure without virus detection in the first place, as discussed above. If it's not secure, adding virus detection doesn't make it secure, it just adds complexity, which is the enemy of security.

      Defense against malware should be a default-feature of the OS

      The phrase you're looking for is secure by default. If a system is secure by default, it doesn't need virus detection.

      --
      Parity: What to do when the weekend comes.
    7. Re:Wny Anti-Virus is an OS function by drsmithy · · Score: 1
      Think of it this way: the malware is asking your operating system to do something. The correct response from your operating system is to not do it. That is all the "defence" that is necessary in an operating system - completely passive behaviour, without any extra code necessary.

      How does the operating system know which "requests" are malicious ?

    8. Re:Wny Anti-Virus is an OS function by drsmithy · · Score: 1
      it is to design the architecture in such a way that infection is very difficult.

      You say this like it is easy to do, and/or that every other OS except Windows does it - yet neither of these statements is true.

  10. Improved Security? by Anonymous Coward · · Score: 0

    Personally, I would be happier if you didn't need an antivirus and firewall on windows to start with. It's just more bloatware to eat away your CPU cycles and waste your RAM. Not to mention that if there is a de-facto antivirus on windows, you can be sure any virus will target *that* first, making the concept rather disadvantaging.

    Next thing you know they'll be offering their own development interface, media player, web browser and e-mail client... Oh wait...

    1. Re:Improved Security? by Anonymous Coward · · Score: 0

      Personally, I would be happier if you didn't need an antivirus and firewall on windows to start with.

      You need an antivirus on every maschine - nearly every OS has its problems (ok, MacOSX has 0 known viruses, but that's OT). Under Windows you do not nessesary need a personal firewall. I collected a few links for you ;)
      http://www.fefe.de/pffaq/
      http://www.iks-jena.de/mitarb/lutz/usenet/Firewall .en.html
      http://www.ntsvcfg.de/ntsvcfg_eng.html
      http://www.stud.tu-ilmenau.de/~traenk/zaweg.htm (this one's evil...)

      Don't get me wrong: Firewalls are great - just personal firewalls aren't (IMHO). A firewall is a concept and not a program. Get a fine proxy and configure a packet-filter on it - this will give you more security than any personal firewall could!

  11. It's right and it wrong by erroneus · · Score: 3, Insightful

    It's right for Microsoft to be interested in security. It's wrong for them to attempt to profit from it. I don't think I need to go into any lengthy discussion about those notions.

    If you ask me, Microsoft should create a mode of operation in Windows that will disallow all programs and libraries except for the ones indicated in some list. This would be most useful for corporate desktops but could also be useful for a bunch of other users as well. It would prevent the installation of software that is unwanted and all manner of things. It would change the way people use their computers, of course, but then I think it should change. It would do wonders for Microsoft's security reputation and I can't imagine it would be particularly difficult to implement. But we already know most people would simple turn that off anyway -- it impedes their access to the wonderful experience of "internet browsing" and downloading cool new things. (They get what they deserve IMHO) And since MS still essentially controlls the desktop, it's not like anyone would consider switching because Windows became a little more annoying...

    1. Re:It's right and it wrong by Anonymous Coward · · Score: 1, Insightful

      If you ask me, Microsoft should create a mode of operation in Windows that will disallow all programs and libraries except for the ones indicated in some list.

      They already do. It's called Microsoft Bob

    2. Re:It's right and it wrong by MyLongNickName · · Score: 1

      So I write a little app I want to share with a friend... do I have to go to Microsoft to get their permission to let them run it? Brilliant... in the next breath you will probably complain about big brother preventing you from Tivoing your favorite TV program (it's my hardware, I can do whatever I want).

      --
      See my journal for slashdot ID's by year. Mine created in 2005. http://slashdot.org/journal/289875/slashdot-ids-by-year
    3. Re:It's right and it wrong by krgallagher · · Score: 1
      " It's right for Microsoft to be interested in security. It's wrong for them to attempt to profit from it."

      The problem is if they give it away. If Microsoft begins giving away their security suite, then Symantec will probably go the way of Stac Electronics and Netscape.

      --

      Insert Generic Sig Here:

    4. Re:It's right and it wrong by ProZachar · · Score: 1

      "The problem is if they give it away. If Microsoft begins giving away their security suite, then Symantec will probably go the way of Stac Electronics and Netscape."

      Not seeing the downside here.

    5. Re:It's right and it wrong by Anonymous Coward · · Score: 0

      ...or your friend could add it to the list?

    6. Re:It's right and it wrong by ScentCone · · Score: 0, Troll

      Why is it wrong for them to profit from selling a system that works for people? One of the regular claims from the Mac people is that they've chosen an OS that doesn't have vulnerabilities. Isn't Apple profiting from selling a package that doesn't need Symantec and McAfee et al to even exist?

      Your proposal (an operating mode that doesn't allow users to execute anything an-approved) already exists, and corporate users of MS products use it every day. Of course it can be annoying if you're a power user, but plenty of power users get caught by malware even when they think they're being very careful. To sum up: your suggestion has already been implemented. Further, the profiting you're complaining about is also being enjoyed by Apple, Red Hat, and anyone else that puts together something well-rounded (security-wise) for end users to just... use.

      --
      Don't disappoint your bird dog. Go to the range.
    7. Re:It's right and it wrong by foniksonik · · Score: 1

      I'll focus on your first statement... cause the second one already exists for corporate Windows systems if they care enough to implement it.

      Microsoft should be interested in security, yes. Specifically they should be interested in putting out a secure OS. If in the pursuit of this goal they end up with a system that doesn't need 3rd party security for OS related issues then good for them. If they want to include apps other than the OS in Windows, then they should also be interested in securing those as well. If they want to make a commercial security application that allows people to run their system reasonably safely while still exposed to outside influences, no problem (say for instance you want to use email, the OS just opens the email port for you, it's secure in how it does it but there are still nasty virii and worms coming in with all the normal mail... they should secure Outlook against this but they could also provide an alternative tool for those who want to use a different email client).

        I don't see a conflict here as far as profit goes, unless they are profiting from problems in their own apps. If all the Microsoft apps are secured against vulnerabilities they have, then MS can make a security program that protects other 3rd party apps that haven't done so. If on the other hand MS wants to make an app that just 'fixes' the problems in their other software, then no they should not make a profit from it... they should simply admit that their software is insecure and that it is easier for them to create an app that specifically addresses these things and is easy to update without breaking their other apps and of course give it away to anyone with a license to their other software. If this strategy to make their apps secure eats into the sales of a 3rd party who only exists to do the same thing... waa waa... it was a niche that should never have existed to begin with.

      --
      A fool throws a stone into a well and a thousand sages can not remove it.
    8. Re:It's right and it wrong by twiddlingbits · · Score: 1

      "Microsoft should create a mode of operation in Windows that will disallow all programs and libraries except for the ones indicated in some list."

      Are you SURE you want that, what you described is DRM taken to the extreme. The Windows Registry was the first attempt to do what you said but it is vulnerable. So, who decides what programs go onto the list as "legal", Microsoft? I don't think so! The user? If it is the user then you got the same issues you have now! So, what is the solution??

    9. Re:It's right and it wrong by Anonymous Coward · · Score: 0
      If you ask me, Microsoft should create a mode of operation in Windows that will disallow all programs and libraries except for the ones indicated in some list.


      They did. It's called Software Restriction Policies and it is exposed through Group Policies which can both be affected locally for an individual workstation or propogated network-wide over Active Directory for specific organization unit containers.

      Software Restriction Policies is a set of options available to the administrator that allows specification of what executable files may be loaded and under what constraints they will operate. Policies affect binary files, like EXE and DLL, as well as any extension listed in the policy as an executable file. Individual policies may specify what files may run or not based on physical location, certificate, file hash or Internet zone. Also, these policies can specify what registry keys that software may have access to.

      This technology has been in Windows since Windows 2000. It was reported on Slashdot as Microsoft being an evil monopolist asshole trying to leverage their position to fuck up OSS by defaulting to nothing but Microsoft-written code working and not permitting end users to modify the settings. Gee, Slashdot was wrong, big F'n shock.
      1. Open the Run dialog and enter gpedit.msc
      2. Expand the following nodes:
        1. Computer Configuration
        2. Windows Settings
        3. Security Settings
        4. Software Restriction Policies

      3. Right click on the Software Restriction Policies node and click Create New Policies
      4. Enjoy
      5. ?
      6. Profit!

    10. Re:It's right and it wrong by Joe123456 · · Score: 0

      Like Safe Mode

    11. Re:It's right and it wrong by I'm+Don+Giovanni · · Score: 1

      Your friend could add it to the list. But this means that your friend could also add to the list "PamAndersonNude.exe" that he received in email, and we're right back where we started.

      --
      -- "I never gave these stories much credence." - HAL 9000
    12. Re:It's right and it wrong by Bellum+Aeternus · · Score: 1
      IE is free, and it's why it's crap. Yeah, yeah - FF is free too, but it's built by people who care. The engineers at M$ are just people doing their day job. The depts that don't make money don't get the glitz, glamor, or big bonuses - so they make inferior products. It's human nature.

      Lets not have M$ repeat its IE mistake again - and lets give Symantic something to compete against. Average joe won't realize that M$ Almost-Virus isn't as good as Symantic Anti-Virus, he'll buy whichever is cheaper.

      --
      - I voted for Nintendo and against Bush
    13. Re:It's right and it wrong by Anonymous Coward · · Score: 0

      Or you could just call it "safe mode".

    14. Re:It's right and it wrong by ScentCone · · Score: 1

      Outstanding use of the Troll mod as a feeble form of uninformed argument! Classic slashdot - a Troll mod that is itself a Troll mod.

      --
      Don't disappoint your bird dog. Go to the range.
    15. Re:It's right and it wrong by drsmithy · · Score: 1
      Are you SURE you want that, what you described is DRM taken to the extreme. The Windows Registry was the first attempt to do what you said but it is vulnerable.

      I think you have a deep misunderstanding of what the Registry is for.

    16. Re:It's right and it wrong by drsmithy · · Score: 1
      If Microsoft begins giving away their security suite, then Symantec will probably go the way of Stac Electronics and Netscape.

      Stac was killed by plummetting storage costs removing the need for their product.

      Netscape died because they didn't improve their product.

    17. Re:It's right and it wrong by drsmithy · · Score: 1
      If you ask me, Microsoft should create a mode of operation in Windows that will disallow all programs and libraries except for the ones indicated in some list.

      You can do this with Group Policy.

    18. Re:It's right and it wrong by twiddlingbits · · Score: 1

      No, I don't. Part of the Registry "concept" way back in Windoze 3.1 was to setup a place to locate control parameters about the OS and installed hardware, software, what DLL's it uses, how to uninstall, how to work with other apps, etc. The fact that the Registry does not contain "rights" information now does not mean it wouldn't in the future. In fact that's the logical place to put it! HKEY_USERS and HKEY_CURRENT_USERS would be where the "rights" for programs are established if the current structure was kept.

    19. Re:It's right and it wrong by drsmithy · · Score: 1
      No, I don't. Part of the Registry "concept" way back in Windoze 3.1 was to setup a place to locate control parameters about the OS and installed hardware, software, what DLL's it uses, how to uninstall, how to work with other apps, etc.

      Rrrright, but your implication earlier was that the purpose of the Registry, and the objective in creating it, was to restrict what the user could do. This is not even remotely true. The Registry is a system database, largely used for static and dynamic configuration data.

      The fact that the Registry does not contain "rights" information now does not mean it wouldn't in the future. In fact that's the logical place to put it! HKEY_USERS and HKEY_CURRENT_USERS would be where the "rights" for programs are established if the current structure was kept.

      There are already Group Policy settings that can control what a user can and can't execute.

  12. Future? by mayhemt · · Score: 2, Funny

    Are we going to see 'Security Fix For Microsfot Anitvirus KB99999' in the future?

  13. To be fair... by iamacat · · Score: 2, Insightful

    Windows badly needs a bundled Anti-Virus/Anti-Spyware solution. Perhaps MS shouldn't be punished for doing the right thing for the users for once.

    1. Re:To be fair... by Anonymous Coward · · Score: 0

      If MS fixed their security, there would be no beef. They are not doing this. They are going to use their monopoly position to take over a 3rd party market (whatever you think of Symantec, there are others effeted, to) that detects and removed viruses and spyware. And who is to say they will do a better job? By creating such a product, and elimiating competition in the security space, you are left with MS - an insecure product, and then trusting them to secure it.. again.

      MS needs to fix the ROOT PROBLEM. Their current actions are not fixing the problem, only eliminating competition. The problem will still exist, and only Microsoft will have a product to "fix it".

    2. Re:To be fair... by jejones · · Score: 1

      Selling you something broken, and then charging extra to make it work, is the right thing? Sounds to me like MS has finally figured out what they could call the Other Other Operation.

  14. Seriously now... by root-kun · · Score: 1

    Microsoft SHOULD include antivirus in the OS, they should have years ago.

    Yes, it will make Norton, McAfee and the like totally irrelevant. Yes it will put Symantec folks out of a job _eventually_. But frankly I'd rather have an internet free of spambots, packet bots, and the like. These things should be in the OS, bundled with it, unremovable, and difficult to disable for the average user, who is likely going to be the one spreading virii unknowingly.

    1. Re:Seriously now... by Red+Flayer · · Score: 1

      " Microsoft SHOULD include antivirus in the OS, they should have years ago.

      Yes, it will make Norton, McAfee and the like totally irrelevant
      "

      It would hardly make them irrelevant, since there is no way that a single source for AV/AS software would block all malware. The problem is that it would make them unprofitable, and therefore non-existant, even though the need for them would still be there.

      --
      "Trolls they were, but filled with the evil will of their master: a fell race..." -- J.R.R. Tolkien on Olog-hai
  15. Yeah rite... by TarrySingh · · Score: 1

    The European Commission is looking into Microsoft Corp's recent moves into the desktop security market, according to Symantec Corp, one of the companies that stand to lose the most if Microsoft leverages its monopoly to compete. I'm telling you in this massive craze of usurpation and takeovers, eventually we'll be pushed back to the good ol' 50's where only a few will exist!

    --
    Scott McNealy to Michael: "Suck my Sun!" Michael Dell to Scott : "Lick my Dell!"
  16. Symantec deserves to die by realmolo · · Score: 1

    I mean, really. Norton AV and security products are terrible. Everyone knows this. And why SHOULDN'T AV/anti-spyware be part of the operating system? I mean, really. Those seem like OS functions to me. Anything security-related should be built-in.

    Yes, MS should fix their security holes. But then wouldn't that put Symantec out of business, too?

    1. Re:Symantec deserves to die by Red+Flayer · · Score: 1

      "And why SHOULDN'T AV/anti-spyware be part of the operating system? I mean, really. Those seem like OS functions to me. Anything security-related should be built-in."

      And of course, MS would release updates to protect from and/or remove known exploits within hours/days.

      A single-source supply of AV/AS software is simply not enough. If MS bundles AV/AS with Windows, then Symantec etc will be driven out of business, or at least shrunken so much that their update teams can't handle new threats in a timely manner... leaving us with single-source for AV/AS.

      --
      "Trolls they were, but filled with the evil will of their master: a fell race..." -- J.R.R. Tolkien on Olog-hai
    2. Re:Symantec deserves to die by ThaReetLad · · Score: 1

      Symantec's case isn't helped by the fact that none of the major AV/firewall vendors have come up with a home user security package for Windows XP x64 yet, and that may be hindering sales of the OS. In effect they are forcing microsoft's hand by leaving a portion of microsoft customers unprotected.

      --
      You can't win Darth. If you mod me down, I shall become more powerful than you could possibly imagine
  17. Re:It seems Microsoft is in a lose-lose situation. by Anonymous Coward · · Score: 0

    They did it to themselves by allowing there to be a market for anti-virus software in the first place.

    If MS fixed bugs the way Apple or Sun fixes bugs, there would be no need for any AV software at all - MS or otherwise.

  18. Your bloat, my convenience by AviLazar · · Score: 2, Insightful

    Maybe you think having anti-virus pre-built into MS is bloatware, but I find it to be useful and frankly it should have been incorporated years ago. Bloatware is putting in things that are useless, like AOL ;)

    Antivirus, spyware protection, firewall, internet browser (to name a few) --- these are things that should come in any OS product. In fact, they should be as mandatory as TCP/IP protocol.

    If anything this will help those people who never buy anti-virus software...they just unpackage their computer, plug it in and turn it on...and then they get slammed with viruses.

    --

    I mod down so you can mod up. Your welcome.
    1. Re:Your bloat, my convenience by Phisbut · · Score: 2, Insightful
      Antivirus, spyware protection, firewall, internet browser (to name a few)

      A firewall should never be required to run any PC, because no PC should ever respond to a connection attempt that it wasn't designed/configured to handle. A firewall's sole purpose is to close ports that should not have been open in the first place.

      --
      After 3 days without programming, life becomes meaningless
      - The Tao of Programming
    2. Re:Your bloat, my convenience by TheRaven64 · · Score: 2, Insightful

      Half right. It's useful to be able to prevent partially-trusted programs from initiating connections as well. This would be better done with an app-level sandbox, or something like systrace, but a local firewall can also be useful.

      --
      I am TheRaven on Soylent News
    3. Re:Your bloat, my convenience by AviLazar · · Score: 1

      A firewall should never be required to run any PC, because no PC should ever respond to a connection attempt that it wasn't designed/configured to handle. A firewall's sole purpose is to close ports that should not have been open in the first place.

      I never said a fire wall should be required to run on a pc...i said it should come with an OS. I may want to have ports open, but still need to manage the open ports with a firewall.

      --

      I mod down so you can mod up. Your welcome.
    4. Re:Your bloat, my convenience by hackstraw · · Score: 0

      A firewall should never be required to run any PC, because no PC should ever respond to a connection attempt that it wasn't designed/configured to handle. A firewall's sole purpose is to close ports that should not have been open in the first place.

      Those two sentences are mutually exclusive (slaps virtual moderators).

      Windows leaves those ports open "for a reason". I don't know what it is, but it is intentional.

    5. Re:Your bloat, my convenience by gcantallopsr · · Score: 1

      I'm afraid you don't know what are you talking about. Bloatware here means doing two antagonic things with the same package of expensive software while wasting your resources. The first thing is putting your system in danger with a poorly designed operating system. The second thing is trying to make it secure with more software instead of properly fixing the design from the beginning. It's like buying a sieve and some duct tape and expect it to behave like a big spoon :-)

      --
      Try Ubuntu GNU/Linux, it's great!!!
    6. Re:Your bloat, my convenience by AviLazar · · Score: 1

      I'm afraid you don't know what are you talking about. Bloatware here means doing two antagonic things with the same package of expensive software while wasting your resources. The first thing is putting your system in danger with a poorly designed operating system. The second thing is trying to make it secure with more software instead of properly fixing the design from the beginning. It's like buying a sieve and some duct tape and expect it to behave like a big spoon :-)

      Is that the official definition on /.? Well Would you point me to the /. dictionary please? Bloatware is oversized software. YOu know, solitaire that ranges about 50 megs, instead of under a meg. Bloatware is having a TON of extra stuff installed that are not needed but forced. Obviously there is some differing opinions on what is needed, but i guess you could use the MS card games (i.e. solitaire..i would say on a business laptop that would be bloatware).

      --

      I mod down so you can mod up. Your welcome.
    7. Re:Your bloat, my convenience by Overly+Critical+Guy · · Score: 1

      Antivirus, spyware protection, firewall, internet browser (to name a few) --- these are things that should come in any OS product. In fact, they should be as mandatory as TCP/IP protocol.

      Ladies and gentleman, this is the mindset Microsoft has fostered in the populace. "It's good to diaper your OS like a baby with layers of applications to protect your OS from the Internet."

      Spyware protection should ABSOLUTELY NOT be mandatory or part of the TCP/IP protocol (ha)--spyware takes advantages of flaws in Windows architectural design, and Microsoft should fix that design. Viruses rely on propagation, and systems like OS X simply don't have the mechanisms to allow for that--hence no viruses in five years. It doesn't even have a firewall enabled by default, because it keeps no open ports--an OS should NOT require a firewall to operate. It shouldn't keep open any port it doesn't need and shouldn't use any to begin with.

      --
      "Sufferin' succotash."
    8. Re:Your bloat, my convenience by AviLazar · · Score: 1

      Ladies and gentleman, this is the mindset Microsoft has fostered in the populace. "It's good to diaper your OS like a baby with layers of applications to protect your OS from the Internet." Spyware protection should ABSOLUTELY NOT be mandatory or part of the TCP/IP protocol (ha)--spyware takes advantages of flaws in Windows architectural design, and Microsoft should fix that design. Viruses rely on propagation, and systems like OS X simply don't have the mechanisms to allow for that--hence no viruses in five years. It doesn't even have a firewall enabled by default, because it keeps no open ports--an OS should NOT require a firewall to operate. It shouldn't keep open any port it doesn't need and shouldn't use any to begin with.

      You really shouldn't generalize, one because in my case you are wrong, two because you haven't done (if you have please show this evidence) any qualified research into the sociological thought process of the people with regards to MS OS' and inclusive programs

      See your opinion is that spyware is not absolutely mandatory, mine is different. It is an opinion, so state it as such, try not to make it sound a matter of fact. We bitched and moaned, and MS came up with a solution, now we still bitch and moan....

      In related news: It has been determined that MS is not the source of viruses, but malicious hackers. Billy G rejoices in having his name cleared of creating viruses.

      OS X did have a few exploits/viruses. MAC is also more expensive, and more proprietary - so I wouldn't boast it that much.

      --

      I mod down so you can mod up. Your welcome.
    9. Re:Your bloat, my convenience by Anonymous Coward · · Score: 0

      Or a firewall can prevent errant programs from opening an outside connection that you don't know about.

    10. Re:Your bloat, my convenience by Anonymous Coward · · Score: 0

      Bloat would be anything that is not part of the core functionality of the OS or the userbase, and as it applies to windows and your average 'joe user' security tools that are included by default very well could sit outside that catagory. Joe User opens email attachments, clicks on anything that moves, and ignores those little .jpg.exe pictures they found on kazaa. Having an intergrated OS solution may save his PC from becoming one of the botnet army.

      But, I see where the EC could be concerned. Are we looking at another non-removable meshed-into-the-os microsoft application like IE? For people like myself that actually watch what their PC is doing, the MS security apps need to be removable, completely (none of this Windows firewall "disable me but you can't remove me" crap). Allow for this and there is still a perfectly viable market for well established security firms like Symantec and Mcaffee.

    11. Re:Your bloat, my convenience by drsmithy · · Score: 1
      Spyware protection should ABSOLUTELY NOT be mandatory or part of the TCP/IP protocol (ha)--spyware takes advantages of flaws in Windows architectural design, [...]

      What flaws ?

  19. quoting by Anonymous Coward · · Score: 0

    "The European Commission is looking into Microsoft Corp's recent moves into the desktop security market, according to Symantec Corp, one of the companies that stand to lose the most if Microsoft leverages its monopoly to compete. We've not filed any official complaint," a Symantec spokesperson said.

    So, the Symantec spokesperson says things like "according to Symantec Corp"?

  20. Key difference between monopoly and comprehensive by Afecks · · Score: 1

    Comprehensive is having everything you need in one package, a monopoly is not allowing anyone to provide replacements for parts of that package.

    If Microsoft were to make it so ONLY their antivirus would be able to work, then we'd have a problem. Otherwise most people will still use 3rd party software because a company that only makes security products will probably do a better job.

  21. let me know of some OS that is immune by badriram · · Score: 1

    There are NO OSes are immune to security woes, including OS X, linux etc. If you think you, well you need a lot of education. MS already fixed the no ports open by default with XP SP2, now they only have to fix the default Administrator priviledges on home computers. EVERY other problem is created by the user, lauching untrusted applications in any OS will be make vulnerable.

    1. Re:let me know of some OS that is immune by twiddlingbits · · Score: 3, Insightful

      When the default browser (IE) is NOT a trusted app then you know you got problems. In fact I wouldn't consider the OS itself a trusted app. So just booting up Windows makes your machine insecure.

    2. Re:let me know of some OS that is immune by Overly+Critical+Guy · · Score: 1

      There's more to it than that. For instance, like all UNIX distributions, Mac OS X spawns background system processes, called daemons, to handle various tasks. When a user logs into Mac OS X, a special security context is created for that user. Any applications that user launches are started under that user's credentials. Background processes can respond to requests from user-level applications, but they can not initiate any contact with the user, nor present any graphical interface, because they operate in a separate security context.

      This is an important security measure that is missing in Windows, which allows for "interactive services." Allowing system processes running as root ("Services running as LocalSystem" in Windows-speak) to present a graphic UI to a logged in user ("become interactive with the desktop") is, to quote an MSDN blogger, a "spectacularly bad idea that should never have been added to the system."

      Window's casual mix of security contexts makes it easy for malicious code to jump from the user's limited access realm into the root context, making it easy for a basic exploit to take over the entire machine. Exploiting this Windows-only flaw is called a Shatter Attack.

      For you to claim "EVERY other problem is created by the user" is ludicrous.

      --
      "Sufferin' succotash."
    3. Re:let me know of some OS that is immune by ckaminski · · Score: 1

      In order to install software to perform the "shatter attack" you must *BE* an administrative user. No such software is installed by default in Windows. As such, it must be installed by the end user.

      Hence, all spyware/worms of this nature are end-user issues.

      Please note that X11 is not immune to similar attacks. If you have certain filesystem permissions, you can most certainly hijack other windows on your system, and Linux and many Unixes have been plagued with privilege escalation bugs over the years.

    4. Re:let me know of some OS that is immune by badriram · · Score: 1

      I would you would one of those people that thought firefox was secure as well. I use firefox not because it is more secure, but because it is targeted less.

    5. Re:let me know of some OS that is immune by twiddlingbits · · Score: 1

      I know FF has had some problems, but they were 1)Minor compared to those of IE 2)were fixed VERY quickly, not months later and 3) were publically disclosed to everyone, FF even displayed info that told you "critical updates" were needed, I haven't seen that in IE!

  22. I like Symantec's reaction by RelliK · · Score: 1

    "We've responded to a request for information from the European Commission... we were not proactive, they came to us."

    Sounds like someone is already scared shitless of retaliation. "It wasn't me -- it was all him, I swear!"

    --
    ___
    If you think big enough, you'll never have to do it.
  23. Hmm... by MaestroSartori · · Score: 1

    I don't really know whether it's good or bad that MS is going down the route of having actual security products & schemes.

    On the one hand, as many people here have said, it'd be useful if they concentrated on making the OS itself robust and less vulnerable to exploits etc. That's just common sense, and if their press is to be believed they're doing that. Time will tell.

    On the other hand, they could release Vista, no exploits are found or at least publicised, and that wouldn't mean it was perfect. Antivirus and firewall would still be needed, so why shouldn't they provide them?

    The real problem would be if they bundled them free-of-charge. Regardless of their quality, that would kill a large proportion of third party commercial equivalents, and I don't necessarily see Free/Open alternatives necessarily catering to that market.

  24. MS security movies by Anonymous Coward · · Score: 0

    I had to read the title a few times to pick out "moves" ... somehow I thought the EU was watching MS's security "movies" ...

    (let me guess - the movie's short and has no plot...)

  25. All the Linux distro vendors need to watch it to by SocietyoftheFist · · Score: 1, Funny

    What is that crap with iptables, that is patently unfair. Let me choose what I want, don't ship or make your own seperately available security software.

  26. This is ridiculous by Edd!3 · · Score: 1

    As much as I hate Microsoft, I cannot see why they don't have the right to create an Addition to their operating system. Why doesn't Mozilla sue Microsoft for putting Internet Explorer onto Windows? Why doesn't RealPlayer sue them for Windows Media Player? The fact is, Windows, as terrible as it may be can come with as much [spyware infested] programs as they want, for it's their product.

    1. Re:This is ridiculous by Anonymous Coward · · Score: 0

      Why doesn't RealPlayer sue them for Windows Media Player?

      They did... http://www.realnetworks.com/company/press/releases /2003/dec18.html

    2. Re:This is ridiculous by Edd!3 · · Score: 1

      Well, that's just as stupid, It's Microsoft's product, they can do whatever they want to their product, if you're unhappy then don't make your product for Windows.

    3. Re:This is ridiculous by 99BottlesOfBeerInMyF · · Score: 4, Informative

      The fact is, Windows, as terrible as it may be can come with as much [spyware infested] programs as they want, for it's their product.

      The fact is, Monopoly Inc.'s product, as terrible as it may be can come with as many bundled other products as they want, for it's their product.

      Oh wait, or we could pay attention to all the antitrust laws that have been written and all the economics we have learned in the last 400 years and realize that monopolies tying new products to an existing monopolized product results in them completely bypassing fair trade and competition and results in them taking over more and more markets, products that are inferior (since the benefits of competition no longer apply), products that are unfairly priced (again competition is bypassed), the economy suffering (since one company gets more money than the value of the work/product they provide), the industry suffering (since their is no motivation/oportunity for innovation), and eventually (in theory) a single company taking over all markets.

      I take it you slept through your freshman economics course? It is illegal for monopolies to bundle products and that is exactly what MS is doing and has been convicted of doing in the past. Unfortunately all of the punishments and remedies have been largely ineffective.

  27. Re:Good thing by HaydnH · · Score: 2, Funny

    I love the way a lord of the rings reference gets a score of -1, Troll - very funny whoever modded that ;P

    Haydn

    --
    Time is an illusion. Lunchtime doubly so. - Douglas Adams
  28. Paying twice... by jferris · · Score: 2, Insightful
    Judging from the article, Microsoft's security offering will be a separate product line and not a part of the OS. This is my slant on it...

    I believe that Microsoft has an obligation to provide this as a core functionality of the OS. Otherwise it is the equivalent to buying a house without a roof, and then having to pay again so that it is livable/usable. While it should be appreciated that Microsoft has recognized that there is a legitimate need to correct these issues, doing so by offering a new product line is the wrong way to go about it.

    As a software developer, I could only wish that I could get away with selling a product that could only be secure/viable/etc. by having the user buy another product to plug the leaks. How about trying to improve system testing or cooperating with other vendors to isolate and contain threats? Nah, that would be way too productive.

    --
    You are in a maze of little twisting passages, all different.
  29. Comment removed by account_deleted · · Score: 2, Insightful

    Comment removed based on user account deletion

  30. I'm not sure there's a problem here. by kennyj449 · · Score: 2, Insightful

    Frankly, some of the products being complained about are things that by all rights should've been incorporated into the OS years ago... and which are already standard offerings for almost every other popular operating system in the industry. At the very least, there are very valid reasons for MS to include network security features in their OS - they simply BELONG THERE. In some cases, Microsoft is only doing what the rest of the industry has been doing for decades.

    Now, the anti-malware provisions are a different story. In many ways this is Microsoft cleaning up their own mess. If they provide the products free of charge (as with the Anti-Spyware Beta) I really don't see a problem - they're addressing their own issues. At the end of the day, Symantec's (and others') cash cow is a product that makes up for another product's deficiencies. This would be like Fram getting PO'd about Ford making gas inlet doors that can't be opened from the outside, because that reduces their market for locking gas caps.

    If MS sells the crap, though... just plain wrong. I'd use a Microsoft security product as a supplement to other solutions if it were free, but I sure as hell won't actually pay them for it. They created the security holes in the first place; I'll accept proactive solutions but I won't pay for a reactive workaround by the same people responsible.

    1. Re:I'm not sure there's a problem here. by Xtravar · · Score: 1

      They're charging so as to not look anticompetitive.
      They didn't charge for IE, and destroyed the browser market.
      They didn't charge for WMP, and destroyed the media player market.

      I see them charging as actually being *friendly* to the competition.

      --
      Buckle your ROFL belt, we're in for some LOLs.
    2. Re:I'm not sure there's a problem here. by drsmithy · · Score: 1
      They didn't charge for IE, and destroyed the browser market.

      The lack of competitive products for a ~5 year window destroyed the browser market.

      They didn't charge for WMP, and destroyed the media player market.

      Say what ? There's at least 3 major players in the media player market. How the hell is that "destroyed" ?

  31. Why hooks/APIs aren't good enough by G4from128k · · Score: 1
    MS only need to provide the hooks, not necessarily the full functionality ... MS could provide the hooks for av software, other vendors could supply the virus definition library, regular updates, nice ui etc

    I can see your point, but it creates some nasty vulnerabilities. What stops the virus writer from exploiting these same hooks? Every hook is a new opening for malware to overwrite/modify the virus definition files, disable the AV function, escalate privileges, inject arbitrary code, create a fake AV UI that actually installs malware, etc. I'm not sure that letting 3rd party software modify the AV system is a good idea.

    --
    Two wrongs don't make a right, but three lefts do.
  32. conflict of interest? by spacepimp · · Score: 1

    I'm a bit surprised to see that this isn't already mentioned, as it struck me as immediately relevant when i heard they were buying an antivirus company last year (sybari?) i think. Now if they are selling an anti virus/spyware product, and profiting from it, what interest do they have in actually hardening their os, and making it secure? In that regard they will lose out on money. So there is no incentive to make a secure system. IN fact they could claim that without this add-on they cant gurantee the reliability or security of the os or network. Now the fact that they are selling this is just a lowly business practice profiting from their own weakness. But had they started pushing this as a feature itself like the media player browser etc,. as a core of the os, the implications towards anti competitiveness would be vast, but then theyd not profit from it.

  33. Re:Why is this a bad thing?!?! by spacepimp · · Score: 1

    If they are so aware of their inner workings and their exploits doesn't this beg the question why don't they fix them and not realease the os with them? Instead they market an upsell profiting from these exploits. shameful

  34. LOL what? by Anonymous Coward · · Score: 0

    iptables is built into the kernel. If you don't want to use it, on RedHat/CentOS/Fedora you can 'chkconfig iptables off'. effin 'tawd.

    1. Re:LOL what? by SocietyoftheFist · · Score: 1

      Why is it built in to the kernel? They can just put whatever they want in it?

  35. My Problem with it by ZachPruckowski · · Score: 1

    From the Full Article (emphasis mine):
    It's still not completely clear how either of Microsoft's desktop security products will be delivered, how deeply integrated into the operating system or Microsoft servers they could be, and how they will be priced

    If Microsoft wants to create an unbreakable OS that spyware, malware, viruses and whatever are useless against, more power to them. That should be their job.

    But if Microsoft wants to charge for the OS and not make it secure, they can't go out and sell the security stuff at extra charge. And if it comes autobundled, it better be superior to anything else, or else it is just like the browser fight.

    Just my 4 cents (I found two extra in a payphone).

    1. Re:My Problem with it by Anonymous Coward · · Score: 0

      What is a payphone?

  36. linux by agentdunken · · Score: 0

    Use Linux and never worry babout all that crap again.

    --
    Linux, because a PC is a terrible thing to waste.
  37. PDF creation by Anonymous Coward · · Score: 0

    The problem with PDF creation at least is that is it a *very* important feature for a word processor nowadays. I have gotten at least one person to switch to OpenOffice because they needed to produce PDFs from their wordprocessor documents, and didn't want to spend money on Acrobat.

    I can understand why Microsoft thinks that they need to provide that feature - the lack of it potentially will cause some people to switch to alternative products.

    1. Re:PDF creation by bdcrazy · · Score: 1

      If its anything like the built in zip folder embedding in winxp, i'll stick with adobe.

      To uninstall the zip folder viewing:
      "regsvr32 /u %windir%\system32\zipfldr.dll"

      --
      Tonights forecast: Dark. Continued dark throughout most of the evening, with some widely-scattered light towards morning
  38. If MS just did their job and made a secure OS by oliverthered · · Score: 1

    Their trying, it's called trusted computing and DRM, the main problem is that their leveraging DRM and trusted computing to prevent users from copying things instead of preventing privilege escalation for data and applications so that a virus, worm, IE or Firefox are highly limited on the damage they can cause to the system.

    Try infecting a already signed email with a trojan or virus.

    --
    thank God the internet isn't a human right.
  39. How this going to make things safer? by oztiks · · Score: 2, Insightful

    I dont see how having a "microsoft" brand or "norton" or whatever is a big difference to the end user.

    Unless micrsoft can actually make money off this endevor then its a waste of time for them, which means they are shipping a defective product and this will have backlashes on microsoft.

    Heck we need to consider what AV really is, its just some tool that sits and stops brittany-nude.jpg.exe from being open or allowed to do harm on the pc. The malicious program can still do the harm and cause the same problems.

    Insted of making a system to actully fix the problem realistically, ms is putting yet another bandaid on the situation _trying_ to make them look like the victors to the consumers.

    Big pull wool over ya face deal here, still the same nonsense ms tactic. What ms needs to really worry about is biting too many hands that feeds them, they've started being more aggressive in the market then ever before and they can only pick so many fights before they start loosing them.

    I yearn for the day when ms is just another software developer and not the only software developer, freedom to code slowly slips away from us when we condone yet another market in which microsoft will successfully plug away from the rest of us. We shouldnt let that freedom disappear for the OSS developer or other Businesses. If such a concept does not concern you then why would you really care what happens ... norton, ms, mcaffee they all turn your pc into a slug and eat your resources to a dim.

    Also i would be looking at code maturity here as an issue as well, norton has been playing the AV game for a while, MS is about to embark on this, i wonder how hard it is for the next worm to break this wonderous AV that is currently in beta stage and cause more millions in losses for people ...

    I guess MS is just one of those businesses that people get burnt by they then the same person just sticks their hand back into the fire ... Dont you find it the least bit curious that they are realeasing it with Vista, and not with their last office package which makes more sence because thats where outlook is packaged and not with the os! or its last service pack with all of its other security components they released? All they are trying to do is sell Vista as being more secure, DUH!

    Heck this virus issue has been around since when? the days of 286! virus' have always been an issue, why now all of a sudden MS gets the idea that its time to implement AV? simple more hype so people will blindly purchase MS products and not stear away to linux, which realistcally holds a big threat for them.

    I think i was preaching this nonesense since windows 98 was out and about and since then very little has changed, how come all of a sudden its going to change now with this magical vista os appearing, i remember the same bs was said about xp, unhackable, secure, safe ... pfft whatever ... whatever sells i guess.

  40. Re:(Non)Working software by prof.morbius · · Score: 1

    Microsoft's new anti-virus/anti-spyware should be called "Windows XP SP3" and it should be free. We didn't pay for software that almost works.

    'Fraid you did, if you bought Windows. And if you/your company is like my company, you will be doing so again soon when Vista goes "final".

    There's a silver lining, though; I don't really find Linux to be quite end-user ready -- there are still some frustrating incompatibilities, hiccoughs with laptops, etc. But as long as Microsoft keeps releasing pre-beta software and making consumers pay through the nose for it, they erode the difference (and adoption disincentive) between their "professional" releases and what the community can come up with in its spare time.

    Or, perhaps I'm simply talking out of an oriface != mouth.

    --
    "A plan's just a list of things that don't happen" -- Mr. Parker, "The Way of the Gun"
  41. the bundle by zogger · · Score: 1

    yes they should, as long as it's free to the customer. If it's a paid add on, there's no incentive for them to make their primary product, the OS, better and more secure. In fact, it would pay them more to release a LESS secure OS, because the *need* for antivirus and firewall would be greater then, increasing sales in that direction, so they get ya coming and going.

    It's a connundrum similar to Sony. One division markets media, another division markets media viewing/using hardware. The media/content side wants all sorts of strange DRM to "protect their IP", whereas the hardware side would (most likely) want to offer more open and more functional hardware because consumers would rather have that.

  42. There is a legal aspect to this too by Been+on+TV · · Score: 3, Insightful

    If Microsoft starts charging for antivirus software, they may under various legislation be seen to ship a defect product that can only be fixed by making an additional purchase of a Microsoft product. This will open up the field for numerous lawsuits including class action in those countries that have it in their legislation.

    The thing is that if Microsoft knowingly ships a product with open attack-vectors, and these can only be fixed by applying another product from Microsoft for which there is an additional charge, I am sure it can be argued under various legislation that they have shipped a defect product and you are entitled to a replacement product without the defects and/or a compensation.

    Microsoft shipping an anti-virus product for their own operating system is significantly different from anti-virus firms shipping such products for Windows. Since Microsoft is 100% responsible for the design and production of their operating systems and applications, and have sufficient knowledge to produce a product to prevent attacks from viruses and spyware targeting their operating environment, they are also 100% capable of clearing those attack-verctors from their own products either by re-design or re-writing the software being attacked.

    So the solution, both from a legislative and technical point of view, is to fix the original defect products, hence there will be no need for the second product and no business can be made from it.

    --
    The future is in beta
    1. Re:There is a legal aspect to this too by PoconoPCDoctor · · Score: 1

      MSFT is "also 100% capable of clearing those attack-vectors from their own products either by re-design or re-writing the software being attacked." I think I saw this elsewhere in the thread - about Joe Stoopid sending Bob Ignoramus the Pam_Anderson.exe? If you are willing to ignore warnings advising you NOT to install or run a program, JPG, or whatever, attack vector removal would have to first work at the ID 10 T layer for guaranteed protection. Hold on, got another call here at the Helpless Desk - what's that you say, your PC is running slow? Let me make a ticket for that, and we'll send a tech over right away. Thanks for calling! B-)

      --
      "Let us raise a standard to which the wise and honest can repair" - George Washington
    2. Re:There is a legal aspect to this too by I'm+Don+Giovanni · · Score: 1

      Except that malware (particularly trojans, which are much more common than viruses nowadays) can do damage regardless of whether the OS has any flaws or not. An OS vendor can easily claim that the mere existence of an anti-malware app from the vendor does not mean that the OS is intentionally defective with the intent to sell more copies of the anti-malware app because the anti-malware app can be beneficial regardless of whether the OS has flaws.

      --
      -- "I never gave these stories much credence." - HAL 9000
    3. Re:There is a legal aspect to this too by Been+on+TV · · Score: 1

      I agree with you on malware particularly since there often is a social engineering aspect to getting it installed on a user's computer.

      --
      The future is in beta
    4. Re:There is a legal aspect to this too by drsmithy · · Score: 1
      If Microsoft starts charging for antivirus software, they may under various legislation be seen to ship a defect product that can only be fixed by making an additional purchase of a Microsoft product.

      This would be true if avoiding viruses and malware wasn't doable with a bit of technical knowledge and some common sense.

      [Microsoft] are also 100% capable of clearing those attack-verctors from their own products either by re-design or re-writing the software being attacked.

      No, they're not. Microsoft can't stop users deliberately running "malicious code".

    5. Re:There is a legal aspect to this too by Anonymous Coward · · Score: 0

      No, they're not. Microsoft can't stop users deliberately running "malicious code".

      I dont know about you but personnally i dont deliberatly run malicious code on my pc, if anything its purley accidental.

      And your right MS cant stop people from beaking their own pcs, say you took a wrench to your PC and bashed it silly, your fault not MS'.

      But if MS is making an application to filter these issues, not stop these issues they are bandaiding the problem, not solving it. Furthermore they are charging for it. This is where the problem gets worse for them, it makes it look like they are fixing a defective product by charging the client extra.

      When i sell a client a program, i dont charge him for fixing my bugs. Same thing here, MS cant expect just because they try to loop their way around it slightly it wont hold like that.

  43. I love it by suezz · · Score: 1

    great situation for microsoft damned if you do damned if you don't

    I would suggest to them a rewriting of their os to make it secure from the get go instead of just piling on crap onto crap.

    too bad for all the companies out there that wrote software for windows - looks like they are going to have a rough time of it in years to come.

    1. Re:I love it by oztiks · · Score: 1

      Damn true ...

      Put your hand in the fire, you usually pull away and not do that again. Unfortunatly with ms everyone keeps putting their dumb ass hand back in there!

  44. Protection from the people who brought you... by NullProg · · Score: 1

    Code Red - IIS.
    I Love You - Outlook.
    Sasser - LSASS.
    Slammer Worm - MS SQL Server.

    The best thing Microsoft could do for thier users today is to return progman.exe as the default shell and allow IE to only run in the users context. Give users full control over what programs can run as a service (including Microsofts own services). Fix the NT kernel so user space programs cannot hook into the system.

    Enjoy,

    --
    It's just the normal noises in here.
    1. Re:Protection from the people who brought you... by I'm+Don+Giovanni · · Score: 1

      Those examples are old, so they've learned from past mistakes. Second, those examples may indicate that Microsoft is better able to provide security systems since they've had to go thru the painful experience of dealing with problems. IIS 6 has a better security record than Apache 2 (just check secunia), which could be a result of the Code Red experience on earlier IIS versions. Outlook hasn't had a massive email virus in years, a result of the "I Love You" experience.

      --
      -- "I never gave these stories much credence." - HAL 9000
    2. Re:Protection from the people who brought you... by NullProg · · Score: 1

      Those examples are old, so they've learned from past mistakes.

      Nice try, go look at the remote exploit fixes I had to apply today (to Lab/user machines). Same old exploits, COM/IE etc. Linux/AIX machines in the Lab I've had to update this year? None.

      Enjoy,

      --
      It's just the normal noises in here.
  45. Why Anti-Virus is NOT an OS function by dascandy · · Score: 1

    The OS should support any software you deem good to run on it while withstand attacks from software doing stuff without your permission. Preventing all malware thereby is NOT an OS task, since who's going to prevent your programs from being considered malware and therefore not run?

    One part makes the engine (the kernel), the second part makes a check on it to prevent you from running stuff that corrupts other tasks (the user-layer wrapper around the kernel) and a third part allows you to do stuff to all software equivalently (the user-side OS support tools that have exceptions from some limits). Or in microsoft terms, the user-layer wrapper is left out (is faster without) and the software-side doesn't have any exception because that makes it faster. OK, leaving my car at a car park in front of the department shop with open doors and the engine running can get me out of the car park quicker, but don't come to me that it's a task of the car developers to keep me from that.

  46. Re:Key difference between monopoly and comprehensi by 99BottlesOfBeerInMyF · · Score: 1

    Comprehensive is having everything you need in one package, a monopoly is not allowing anyone to provide replacements for parts of that package.

    Nope. A monopoly is having enough of a market share for a product or service that their is no effective competition (from a market perspective not a technical one). Windows has dominated the desktop OS space to such an extent it has been ruled a monopoly by the courts in many different countries. Once a company has a monopoly, it is easy for that company to do several things including suppressing any potential competitors and using that monopoly to move into new markets without having to compete fairly. Doing so is illegal.

    Example: Ford can give away all the free gas they want with their cars right up until they have a monopoly on either gas or cars. Once they have a monopoly on cars they can make their cars run without gas, but they cannot bundle their cars with gas. There are also restrictions on what they can do to restrict what kinds of gas their cars can use etc.

    Right now MS has that monopoly on cars and they just announced they are going to get into the gas market. What they need to avoid, legally, is bundling that gas with the car in any way. It is illegal for them to give anti-virus software away with the OS, provide a discount if a customer buys both, or in any way leverage their current monopoly to help their new product along.

    Otherwise most people will still use 3rd party software because a company that only makes security products will probably do a better job.

    Abusing a monopoly is all about bypassing competition. Your assumption that MS will compete against other companies is not necessarily the case. If MS gives the product away and includes their costs in the price of Windows, everyone will have to pay for their product whether they want it or not. If they provide discounts for customers who buy both (or bundle both on the computers they sell) their is no fair competition. It is like expecting a fair deal when one party is aiming a gun at another. MS has the power to crush and OEM PC business and as such is in an unfair position to bargain with those companies to get their antivirus pre-installed. And that is what needs to be protected against by the courts.

  47. About Time by Anonymous Coward · · Score: 0

    This should have been done years ago. Hopefully MS will just build it into the OS instead of selling it as a separate package. It seems like MS is trying to do so many thing. Next thing that will happen is that MS will be selling different OS flavors like for home users, developers, business users, etc. I think that Linux OSs are good because they do not get as many attacks like Windows. If Linux does get more popular there will be more attacks and they will have to develop some additional security measures with anti-virus, anti-spyware, etc built into them. MS finally realizes that they do need to do this.

  48. Adding AV is part of making it secure. by Shivetya · · Score: 1

    That is the key here. Microsoft's software does have problems, most software does. The big problem is that the users are in no shape or form secure. I can't count the number of times people do the same things over and over even after you tell them that is what screwed them up in the first place.

    MS added a firewall to XP and now they are integrating AV. I say good for them. That is one more step to making the system more secure. Since there are many FREE AV packages I don't see a big loss here to those charging; especially Symantec.

    --
    * Winners compare their achievements to their goals, losers compare theirs to that of others.
  49. It's not about quality, but about power by RAMMS+EIN · · Score: 1

    ``If there is anything they should have learned by now from the success of Linux, the benefits of allowing specialized developers creating software packages they know, understand and excel in doing properly, should have been clear to Microsoft by now.''

    Oh, they probably do know that. However, now you're talking about quality. Making the best software isn't and has never been their top priority. What they are doing here is using their monopoly position in OSs and Office Suites as a springboard to domination in other markets. This move is all about control, which they can use to make more money.

    --
    Please correct me if I got my facts wrong.
  50. Whitelisting by RAMMS+EIN · · Score: 2, Interesting

    ``If you want a Truly secure OS which doesn't need any type of protection, then you want Palladium. Simple as that.''

    Yes, but there is a right way and a wrong way to do it. The wrong way is to let one company (especially one with a reputation as bad as Microsoft's) control it. The right way is to let people choose lists to trust (much like APT repositories). I actually think that's a good idea.

    Coupled with sandboxing (so applications cannot access files they have no business accessing, even if they belong to the same user), and safer programming languages (no more buffer overflows, injection vulnerabilities, and memory leaks), this would provide an enormous boost to security, at the expense of very little usability.

    --
    Please correct me if I got my facts wrong.
    1. Re:Whitelisting by Deathlizard · · Score: 1

      It really doesn't matter who is controlling Palladium (or a palladium like system created by someone else). In the end it is an iron clad system governed by some body. So if you create executable code, your dealing with that body or it never runs, and that body has the final say on the matter. I'm sure the RIAA/MPAA would love a system like that. Not me however.

      for example, the PS2. I could write code for it, but if I want to play that code on someone Else's PS2 I would either have to defeat the protection in it or buy a licence from Sony. Since most PS2's aren't modded, there isn't an influx of viruses even though they have writable Memory cards that could be used in some way to infect PS2's

      Sandboxing, memory protection and all is better protection, but it's not foolproof. There are java exploits (which is a sandbox environment), and not all malicious code runs on a memory exploit. Combined it would be a good system, but the idea is to have the maximum amount of protection without severely sacrificing usability, So adding another layer of protection (such as a virus scanner) isn't going to hurt.

    2. Re:Whitelisting by drsmithy · · Score: 1
      The right way is to let people choose lists to trust (much like APT repositories). I actually think that's a good idea.

      "Just add this site to your Trusted Software Suppliers list and you can see $CELEBRITY NUDE !!!"

      *Any* time you allow ignorant people decide what the system can run, that system cannot be secured.

      Coupled with sandboxing (so applications cannot access files they have no business accessing, even if they belong to the same user), [...]

      Who decides this ?

      [...] and safer programming languages (no more buffer overflows, injection vulnerabilities, and memory leaks), this would provide an enormous boost to security, at the expense of very little usability.

      You'll either get practically no boost in security, or a substantial hit to usability.

  51. We need secure computers, not necessarily Symantec by FlorianMueller · · Score: 1
    I'm also wary of Microsoft and its near-monopolies, but as a computer user I don't want to pay separately for essential functionality that should really come with the operating system. The world needs secure computers, not regulatory interference to artificially sustain business opportunities for companies like Symantec.

    The European Patent Office has granted numerous anti-virus and firewall patents, which the EU Commission wanted and still wants to legalize in Europe:
    ZDNet UK: EC slipping software patents "through backdoor"
    TheInquirer.net: EU attempts to intro software patents by the back door
    That would be much more anti-competitive than any bundling decision that Microsoft could ever take.

    It's the same with the Media Player, which the Commission wants to be un-bundled from Windows: Today's computers are multimedia devices, and it's just logical to me that software like that would be pre-installed on a computer when I buy it. As long as those multimedia data formats aren't patented, people would still have the choice to download alternative solutions like MPlayer.

    Getting back to Symantec: That company is a crying baby. They can't seriously insist that Microsoft deliver less secure software just so that Symantec can make some more money! If the EU Commission were to support Symantec's special interest in this case, then it might as well start putting out Stalin-like five-year plans for the European IT markets.

    There must be a limit to (near-)monopoly abuse. If MSFT were to decide that everyone who wants to buy Windows has to buy Office, then I'd also be against it. But I can't see the reason why MSFT shouldn't provide some security software. In fact, my own experience is that Windows' built-in security tools cause a lot less trouble to my system than Symantec's Norton anti-virus and firewall tools (which also leave a lot to be desired in terms of usability).

  52. Virus Scanners are all smoke and mirrors by codepunk · · Score: 1

    Having had to run around and help clean screwed up machines twice this year. Hit by zero day virus outbreaks I firmly belive that the only thing a virus scanner is good for is telling you that you are already screwed and usually after the fact.

    What we really need is some script kiddie with a attitude release one of these worms with a truely destructive payload, then and only then are we gonna see any real change. Imagine something like a code red worm that stayed alive long enough to propigate itself say 48 hours then destroyed anything on the disk, or flashed the bios with crap if it could.

    The only real fix is to fix the darn OS, as it sits right now most of clients connected to the internet are a train wreck just waiting to happen.

    --


    Got Code?
  53. Multiple Whitelists, please by RAMMS+EIN · · Score: 1

    ``If you ask me, Microsoft should create a mode of operation in Windows that will disallow all programs and libraries except for the ones indicated in some list.''

    While I don't think Microsoft "should" do anything other than whatever the hack they want, I agree that it's a good idea. However, as I've written in other places (soon, I'll put an essay on my site so I can link to it), there should be multiple whitelists that users can chose from. This increases users' freedom and limits the possibilities for abuse. Companies could put up a lists containing only the software used at that site, etc.

    --
    Please correct me if I got my facts wrong.
  54. Besides . . . by EraserMouseMan · · Score: 1

    I don't think Windows, Linux, Unix, Mac or any other OS guarantees that the product is 100% secure from all present and future threats. MS takes significant steps toward protecting Windows users and the haters refuse to see how this is a good thing! The truth is that they like the fact that Windows has bugs. The more bugs/security issues the faster the ship sinks.

  55. Your opinion is just laughable by geekee · · Score: 1

    " How about making an O/S that is secure to begin with? Charging people or supplying add-ons to fix one's own problems?"

    Name an OS that is? (No Linux, BSD, Solaris, AIX, and MacOS are not secure)

    --
    Vote for Pedro
  56. Re:We need secure computers, not necessarily Syman by BarC0d3z · · Score: 1

    As the resident techie, I've always been called on to fix and secure the computers of my friends and family and I always sang the praises of Symantec. Well after years of this, yesterday I finally removed Symantec Internet Security from my computer for PC-illin. I frankly got tired of having to reboot once a day due to memory leaks, perfectly good software from being run (even as administrator and after I explicitly stated the software was ok), and having to make special exceptions every time I wanted to install something new. Final straw was having random applications hang with no warning or response until I rebooted. I personally think Symantec should be scared - at least until they stop adding features without fixing their bread-and-butter.

  57. Yeah, yeah, IHBT, whatever by danaris · · Score: 1

    Um, no. Having the browser BUNDLED allows you to go online and download Firefox

    I am pretty sure I said this, wait let's see "As I have said before, having the browser integrated allows me to go online and get hte browser that I want to use"....yea that's what I said... so why are you disagreeing with me?

    Please read my post. Bundled != integrated. Then go back and read it again, and maybe you'll get it.

    1) Isn't that bloatware? I mean, do I really want to jam four different browsers in my computer, make that five, we need to be fair to AOL...and hell there are more browsers, MS shouldn't discriminate - let's include Netscape and the rest.

    No; bloatware is when a single program tries to do more than it should. It may, however, be redundant; that's not the point. Anyway, a) they can put all the browsers that will run on XP in there and it won't take up too much space, b) it's the default install, and you can remove all the ones you don't want; in fact, it would be trivial for them to give you that option when you select the one or two that you want to keep, c) see below.

    2) Why should MS have to support their competitors? Does Symantec have to include a copy of CA ezTrust, or McAfee? Does Half-Life 2 have to include a copy of Everquest 2? No...that is silly, really it is.

    Because they're a monopoly, and monopolies have to play by different rules.

    Let me repeat that, 'cause you don't seem to be getting it: Microsoft is legally a monopoly, regardless of what you would like to believe, and they must therefore play by different rules.

    Microsoft is the only single company in the world with that much power, and that's more power than any single entity of any type should be given. It doesn't matter what your definition of a monopoly is: by the US's, the EU's, and probably that of every other place in the world that has such a definition, they are a monopoly, and so are no longer allowed to be anticompetitive.

    Oh, and you're either an idiot or an astroturfer. Either way, go away.

    Dan Aris

    --
    Fun. Free. Online. RPG. BattleMaster.
  58. A couple of comments on this issue. by MtViewGuy · · Score: 1

    1. Note thet Microsoft is going to sell their security products as a separate cost item, not integrated them into the operating system (and that appears true even with Windows Vista). As such, this leaves the customer to choose the best solution for their needs regardless of the vendor (Microsoft, Symantec, McAfee, Grisoft, Trend Micro, Panda, etc.), which means Microsoft will likely not run afoul of any authority around the world.

    2. I hate to say this, but hackers/crackers target Microsoft because it's the biggest guy out there in the desktop/small server software industry. What will happen when Linux/FreeBSD becomes very popular in the future? That's right, you know the hacker/cracker crowd will go after Linux and FreeBSD with a vengence.

  59. Linux does not have malware or virus poblems by Rick17JJ · · Score: 1

    Linux has never had problems with malware or viruses. I have used Linux on my home computer for about 5 years now. Both Linux and Mac OS X are alternatives that are quite usable and versatile despite not being vulnerable to malware and viruses. There are various reasons for the differences. For instance, unlike Windows most ordinary users do run with full administrative privilges most of the time and Linux also does not use Active X technology. There are other differences as well but for whatever reasons, Linux and Mac OS X have not had problems with malware and virues. Of course, when using Linux I still download the latest security patches and use one of the free firewalls that are available for Linux. With Linux, for security reasons, there are perhaps a few less automagical features but, once it is installed and properly configured, I find it to be an enjoyable easy to use operating system. Being user friendly is not an adequate excuse for Windows not having better security.

    So also, Linux and Mac OS X both show that security can be achived without requiring Microsofts Palladium technology in which untrusted computer owners (such as us) would lose contol of our computers by the restricitons imposed by Palladium. Microsoft will undoubtedly someday use their security problems as an excuse for pushing Palladium and other similar DRM related restricitons on us.

  60. Re:It seems Microsoft is in a lose-lose situation. by jonaskoelker · · Score: 1

    If they add security measures to their system, already existing security companies will call them a monopoly and sue them, whereas if they don't, customers will get angry at Microsoft for not including everything in there for them and will switch to other systems.

    The users will (eventually) switch, no matter what.

    "I'm not pissed off at microsoft!"
    "You will be. You... will be."

  61. Linux does not have virus or adware problems by Rick17JJ · · Score: 1

    Linux has never had any problems with viruses or advertising related spyware. There are virus scanners available for Linux but very few Linux users bother to use them because there have never been any Linux viruses sucessfullly circulating in the wild. There have been about 19 Linux viruses written but a Linux user would need to be terminally stupid and run as root to catch any of them. There are about 100,000 Windows viruses actively circulating in the wild and no Linux viruses actively circulating. I have not personally used any of the other OSes that you mentioned, and know less about them, but my understanding is that viruses and adware are only a problems for Windows and DOS.

    By not being secure, I assume you are refering to the fact that Linux users need to download the latest security patches and use a firewall just like Windows users. I also avoid running unnecessary services on my home computer that I do not use such as SSH. Well Linux is not perfect, but the need for most of these add-on security products such as virus scanners, spyware removal programs and registry cleaners seems to be a Microsoft only problem. I am just a home computer user that uses both Linux and Windows and not a system administrator or security expert but, I have seen for myself how easy it is for Windows to become infected with adware, viruses and Worms. With Windows I always used a firewall with the tightest possible secuity settings, downloaded the latest virus signatures and security patches, used hard to guess passwords and did not click on attachments. Despite that my Windows computer always sooner or later had problems with all of the above. I have used Linux for 5 years and never had those same kind of problems. Linux is not perfect but at least in many ways it seems to be much more secure than Windows.

  62. symantec is not virgin.... by Anonymous Coward · · Score: 0

    after all the acquisitions made by symantec, the only problem that I can see, is that syamtec is about in the same situation like Microsoft is.
    That's why syamtec CEO says: we were not proactive, we were called and we just answered....

    saluti
    Massimiliano.