Slashdot Mirror


Symantec Hopes To Deliver Anti-Virus Online

daria42 writes "Symantec today said it will slowly move towards supplying its consumer applications online as services." From the article: "Sykes also said there was the possibility that tiny pieces of an application or a single virus scan could be resold by organisations such as online banks, which may choose to ensure their customers are not infected with a virus or spyware before they log on to their account ... This could be paid for by the customer using their credit card or by adding it to their mobile phone bill by sending a text message, said Sykes, who warned that banks could decide not to provide access to anyone with an infected computer."

148 comments

  1. Broken Internet by theRiallatar · · Score: 5, Interesting

    What happens when a virus or spyware cripples your ability to launch the service via the web? What happens when you want to boot into a safe, standalone environment (no web access) and scan?

    1. Re:Broken Internet by MightyMartian · · Score: 1

      Well, in the former case, I guess you're going to have to get someone tech-savvy to sort things out, and in the latter, you're going to have to have the full-pop version.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    2. Re:Broken Internet by Anonymous+Monkey · · Score: 1
      It sounds to me like the perfect place for a two fronted attack. 1) An online virus scan at your bank/credit card/stock trading website and 2) A virus scan that runs in a 'safe, standalone environment'. It would be best if the two scanners worked on different algorithms so that if one was tricked odds are the other would not be.

      Thats why I use AVG at home and still scan with varous online AV programs.

      --
      We are the Borg...
    3. Re:Broken Internet by exclusive_lock · · Score: 2, Insightful

      Additionally, I guess we might expect a whole slew of bogus "Symantec Anti-Virus check online! Click here!" that actually propagate trojans and whatnot to unsuspecting users.
      You could get really paranoid and wonder if they are keeping a record of all you filenames, folders, etc. And if you're a repeating offender, will the bank ban you or (OMG!) even file a lawsuit against you?

    4. Re:Broken Internet by Tackhead · · Score: 1
      > Additionally, I guess we might expect a whole slew of bogus "Symantec Anti-Virus check online! Click here!" that actually propagate trojans and whatnot to unsuspecting users.

      And after that, since the "software as a service" business model relies on the software always phoning home to what it assumes is a "trusted" source, and immediately executing whatever it's sent (or worse, listening on all ports for "update" requests :), all the worm authors need to do is make it download the next trusted update from trustme.synnantec.cn instead of trusted.symantec.com.

    5. Re:Broken Internet by IAmTheDave · · Score: 2, Interesting
      An online virus scan at your bank/credit card/stock trading website

      So... does that mean I have to install an ActiveX component on my browser? Or perhaps enable a JAVA applet? Do I have to wait for the bank to scan my entire HD every time I want to check my balance? Does this require me to use IE? Can I still check my balance using Linux or OSX computers?

      Don't get me wrong. I certainly understand that safety is important, and I support the idea of an ISP dropping a customer off of the net if their computer is infected / a spam bot until corrective action is taken. But really, websites requiring scans? Hmm...

      --
      Excuse my speling.
      Making The Bar Project
    6. Re:Broken Internet by Shisha · · Score: 1

      I'm worried for the opposite reason. On Linux or Mac, the antivirus probably won't run, simply because it'll be a windows only thing. Would the bank ban me from using their website, because it couldn't confirm that my computer was "clean"?

      And even if they let me log in, but increase the banking charges to cover their payments to Symantec, what should I, as a Mac user do? Or as Windows user who trust AVG more and has thus payed for an AVG license? Or even worse as a Linux user, where I'm forced to pay Windows tax pretty much every time I buy a computer and now I would be forced to pay Symantec tax, becase Windows is so insecure? This is just getting ridiculous!

    7. Re:Broken Internet by Anonymous+Monkey · · Score: 1

      That is a good point. Perhaps an ISP based virus scan, weekly or monthly would be a better option. If it could be with user approval only, without hogging bandwidth, and not look at private data or recording the kind of files on a computer it could be a good thing. Also, the ISP might be more willing to accommodate non MS Windows.

      --
      We are the Borg...
    8. Re:Broken Internet by buraianto · · Score: 1

      Of course, you could sign all of your software, and run only signed software. Then trustme.synnantec.cn could not inject any code. Unless they h@x0rz Symantec and steal their key.

    9. Re:Broken Internet by turbidostato · · Score: 1

      Maybe you are just not paying attention to the very header of the article:

      "Symantec Hopes To Deliver Anti-Virus Online"

      As in "Symantec hopes to find a new revenue stream to feed their wallets"

      _And_ look at a previous article: "Most Home PC Users Lack Security". Were I a Symantec exec I'd read it as "most users won't pay us a dime since they are not interested at all about antivirus security and all that stuff we sell for a living; we should find an alternative way to force them to pay us for, for... hell, for something! maybe making them paying us through a third agent, their bank, for instance, will do the trick.

      If it makes sense, or it is useful, or it will piss off someone else is completely out of interest!

    10. Re:Broken Internet by IAmTheDave · · Score: 1
      "most users won't pay us a dime since they are not interested at all about antivirus security and all that stuff we sell for a living;

      I've gotta wonder if this doesn't have something to do with the consumer culture. I see buying a computer with OS and then having to buy virus protection and a firewall to go with it akin to me buying a TV and Symantec wanting to sell me a fire extinguisher, because you know those TVs, they'll just catch fire...

      When a normal (non-Slashdot reading) consumer buys a computer, they have some assumption that it comes with appropriate protections built in. Why someone would spend $1000 on a computer and then have to spend more to not get a virus is something some people have difficulty swallowing.

      It's just a thought.

      --
      Excuse my speling.
      Making The Bar Project
    11. Re:Broken Internet by sootman · · Score: 1

      The other day I spent over an hour fixing a friend's computer. She couldn't visit secure sites with IE. To help me determine if the problem was with IE itself or the system's networking in general, I downloaded Firefox, and it couldn't get online at all. A little googling showed me the problem was due to Norton Internet Security being fucked up. Learning that, I had to jump through many hoops to uninstall it.

      Fuck Symantec.

      --
      Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
    12. Re:Broken Internet by turbidostato · · Score: 1

      "they have some assumption that it comes with appropriate protections built in"

      Mine does. It came with Linux.

      "Why someone would spend $1000 on a computer and then have to spend more to not get a virus is something some people have difficulty swallowing."

      Well, I find it difficult too.

    13. Re:Broken Internet by laughingcoyote · · Score: 1

      ISP's are not all that willing to accommodate "non MS-Windows" in my experience. When my connection was getting massive latency a couple of weeks ago, I was looking through my ISP's troubleshooting guide. They had all the basic, smack-yourself-in-the-head stuff (reboot your machine, reset the modem, etc.) which I'd tried, and very little else, but I noticed that in their "system requirements", they stated "Works on Windows or Macintosh computers only, unfortunately at this time service is not available for Linux/Unix."

      This rather amused me, as I was reading that page, on their service, through a Linux machine. Not to mention that Mac OS's are, by and large, Unix with a pretty front end.

      Ran into the same thing with my last ISP-if it's not Windows, you're on your own, and it'll take them an hour and a half to believe you that it's something in their equipment causing the problem. I did finally find one tech who had a clue, and after that always requested to speak to him.

      --
      To fight the war on terror, stop being afraid.
  2. Right, they can't even do it off-line.... by MeBadMagic · · Score: 0, Flamebait

    Why would you even try to force a user to use and infected IE to fix itself. Sounds like a loosing battle to me.....

    --
    A friend will come and bail you out of jail, a true friend will be sitting next to you saying, "damn that was fun!"
  3. Fleecing gits by LordSnooty · · Score: 1

    And what if I want to scan my machine using other, free AV solutions? And what if I am on (gulp) Linux, or a Mac? Punished for the actions of the majority? Tch-oh.

    1. Re:Fleecing gits by griffjon · · Score: 1

      Or if you opt not to pay for the "service" ?

      OTOH, if this were M$ doing this, I'd be much more concerned, but there's still some competition among the AV vendors, and enough Mac and *nix users that the banks probably won't block them all out for not being able to run some activeX virus control.

      Plus, who relies on a web service to check their system for virii? That seems... uh.... mildly stupid, giving admin rights to a web app. I'd presume it'd be signed and whatnot, but still...

      --
      Returned Peace Corps IT Volunteer
    2. Re:Fleecing gits by Heembo · · Score: 1

      Hey, for free anti-virus solutions - I've moved to "AVG Anti Virus" and have been thrilled with. It's not as protective as McAfee - (McAfee stops some virus' pre-signature cause they detect buffer overflows and the like), but combined with a solid software (and hardware) firewall, I feel a little safe. Is AVG (and other freebies) powerful in your opinion?

      --
      Horns are really just a broken halo.
  4. a waste of money by Anonymous Coward · · Score: 0

    meanwhile, huge numbers of people save the annual $40 cost of antivirus software or whatever and put that money toward a Macintosh.

    1. Re:a waste of money by Rialtus · · Score: 2, Funny

      ...where they go and buy Norton AntiVirus for Macintosh.

    2. Re:a waste of money by Stormwatch · · Score: 1

      Which is pretty much pointless, as there are no viruses that can affect Mac OS X.

      Of course, there's this scenario: a Mac user receives a virus-infected file from a PC user; it won't harm his computer at all; but if he sends the same file to another PC user, then that PC will probably be infected. That is the only use for an anti-virus on Mac OS X; the Mac is safe, the weakest link is always Windows.

      The day when people quit using Windows is the day when anti-malware developers will go bankrupt.

    3. Re:a waste of money by Macrat · · Score: 1

      Symantec *IS* a virus.

  5. In communist Russia... by spazmolytic666 · · Score: 0, Funny

    the viruses scan you!

    --
    Help! I've fallen in a karma hole and I can't get up!
    1. Re:In communist Russia... by digitaldc · · Score: 1

      In communist Russia, everything does it to you - get over it or move.

      --
      He who knows best knows how little he knows. - Thomas Jefferson
  6. Linux? by Rydia · · Score: 4, Interesting

    So, uh... what about those of us that run just linux? Will banks assume we're clean, or will they just lock us out because Symantec's stuff returns an error? That's a pretty big concern.

    1. Re:Linux? by Criliric · · Score: 1

      Wait... They make viruses for linux....
      hmmmmm... haven't gotten one yet

    2. Re:Linux? by MankyD · · Score: 2, Insightful
      Will banks assume we're clean...?
      I hope not. Not for fear of linux viruses one way or the other, but because of browser (http header) spoofing. There's no sure fire way of knowing someone's browser and os. You need a plugin or extension that provides authentication (a feature I'm sure these AV services provide.)
      --
      -dave
      http://millionnumbers.com/ - own the number of your dreams
    3. Re:Linux? by Anonymous Coward · · Score: 0

      My wife puts all the viruses on the computers around my house. But you run Linux, so you probably don't have a girl.

    4. Re:Linux? by Beatbyte · · Score: 1

      they will keep operating like normal and won't integrate symantec's garbage. think of the number of clients a bank has times the cost of a license for this. besides that, it limits the number of customers that can use their service. i know guys that work for the IT dept. of banks and none of them are fans of Symantec's products.

    5. Re:Linux? by turbidostato · · Score: 1

      "I hope not"

      I'm quite afraid yes.

      I almost can see it:
      "Your system can't be guaranteed to be free of virus.
      Since our banking on-line services only proceeds to the highest security standards, you shuould upgrade to the latest version of Ms Explorer and configure your browser to accept cookies.
      Your friendly on-line banking system".

    6. Re:Linux? by Anonymous Coward · · Score: 0

      It's really quite simple. Terrorists like us will simply be denied banking privilages.

  7. Sometimes online isn't a good idea by Anonymous Coward · · Score: 2, Insightful

    Thankfully I've already moved away from Symantec products. There are some situations where offering software as online services is not necessarily the best idea. I would put critical system utilities in that category.

    1. Re:Sometimes online isn't a good idea by Anonymous Coward · · Score: 0
      There are some situations where offering software as online services is not necessarily the best idea

      Maybe we can all log in to some big Norton pcAnyWhere 11.x server and access the bank
      via VNC-like remote control of Symantec's safer machine on the Internet?

    2. Re:Sometimes online isn't a good idea by Elixon · · Score: 1

      I agree.

      It will only confuse the customers. How can you trust to the anti-virus scanner taht is downloaded over the web? How will the user know that this is not the real virus pretending to be on-line anti-virus?

      Download this plugin here to play flash, that plugin there to access e-bank, that plugin over there to be secured against viruses, download here the virus to have all your data deleted... download download download - it will make people used to click on every "ACCEPT" button that pops-up.

      "Click here to download and scan your computer against the viruses!" - It reminds me something - isn't it the way how the malware tries to sneak in your PC already? :-))

      I'm afraid that it will create just bigger security problem in hands of internet users who are not tech-savvy...!

      --
      Well, I've got to get back to work. When I stop rowing, the slave ship just goes in circles.
  8. I don't want to by NotoriousGOD · · Score: 4, Insightful

    What if I don't want to pay my bank for a stupid virus service. My bank should be a BANK. What, is Norton going to help me save money in a high interest bearing account now? Businesses should stick to what they do, so they do it best, instead of trying to be "user friendly".

    --
    Where all think alike, no one thinks very much.
    1. Re:I don't want to by jim_v2000 · · Score: 1

      Because everyone knows that banks get a lot of viruses from people checking their account balances online....it's like the easiest way to trasmit a virus into a bank's critical systems....by checking your account balance....yeah! /heavy sarcasm

      --
      Don't take life so seriously. No one makes it out alive.
    2. Re:I don't want to by NotoriousGOD · · Score: 1

      I crashed B of A last week with the Cookie Monster Virus and checking my bank account at 11:11pm. I was pissed off because they gave me an overdraft charge.

      --
      Where all think alike, no one thinks very much.
    3. Re:I don't want to by donnyspi · · Score: 1

      The banks won't be doing this to protect their end of things, they're doing it to protect the virus from capturing your login stuff and sending it to someone. That's my guess anyway.

    4. Re:I don't want to by Nikker · · Score: 3, Insightful
      The only reason I could see this as a GoodThing(TM) is for keyloggers. As a bank I wouldn't care if your computer ran or not because that's completely on your side of the fence. To give a warm and fuzzy feeling to you more than anyone that your not being jacked for the data your entering to what ever PC your using at the time.

      That brings to my mind additional questions, would I want to pay additional money evrey time I use the banks services? By paying this will it insure as in insurance that if I do get snooped that I will be fully covered for any damages that may occur if they were wrong or missed a baddy or two? And how high would they cover? These are banks we are talking about here they will NOT spend money that does not make them money, period.

      This would bring attention to the people who are using friends, family's or public computers for these transactions, it would probably wake them up. What I think would really work is a sandbox using encryption based on a one time password sent to your cell phone. It would be a website password, not unheard of but much more streamlined then scanning an entire computer for bad apples.

      I would think it would work like so...

      1. Goto web site and click on "View account" or something like that
      2. You enter your cell phone number or an alias you have set up with them
      3. Bank responds with a one time code to a personal device which is reasonably secure (wireless hand set)
      4. You enter the code into the app and use only the app for interacting with your account
      5. The bank is sent a checksum of the app on each transaction to insure integrity

      If Symantec is going to use the same method and be sure there will be no infection then using that application to interract would be just as good, no? I may be the only one but I would not want to be waiting at a computer while it goes through the possible millions of files just to do a transfer or check my balance. In that case I would just want the bank to send me a SMS with my balance or a cheezy wap interface to transfer between 2 accounts.

      I guess you can't blame Mr. Norton for trying but I don't think its gonna fly with banks. It does bring about a new method of accesssing the data that should be looked at. Possibly if it works well enough we could use this method for sending other types of confidential data or stuff you just don't want anyone else to see.
      --
      A loop, by its nature, continues. If that didn't make sense, start reading this sentence again.
    5. Re:I don't want to by Anonymous Coward · · Score: 0

      Banks already help us catch identity thieves. I don't see how keeping their system protected from viral hacks is so far beyond the scope of their business.

      Also, though Symantec talks about charging for individual scans, chances are the bank will buy a monthly or yearly subscription, and you'd get the scans for free. (Which brings up a great way to dilute the market. Just log in from your friend's computer to give him a free virus scan! Of course, that might put your bank account at risk from some nasty new virus, but what the hell - it's free!.)

  9. This is news? by TheSpoom · · Score: 4, Informative

    McAfee's been doing this for years and when I was doing tech support, I frequently recommended my customers use Trend Micro HouseCall, a free online virus scan, whenever their current virus scanner wasn't working or wasn't installed.

    --
    It's better to vote for what you want and not get it than to vote for what you don't want and get it.
    - E. Debs
    1. Re:This is news? by madman101 · · Score: 1

      Didn't read the article, did you? Symantec has also been doing what you're talking about for a long time, but that's not what the article is about.

    2. Re:This is news? by the+chao+goes+mu · · Score: 1

      Responding without reading the article? On slashdot? I am shocked.

      --
      Boys from the City. Not yet caught by the Whirlwind of Progress. Feed soda pop to the thirsty pigs.
  10. Virusscan on Mac OSX? by JonTurner · · Score: 0

    Why would you scan a Mac for viruses? To my knowledge, there are some trojan horses, but there aren't any OSX viruses. Now, Mac OS9 and earlier is a different story (there were viruses aplenty) but the old OS was quite different it its design.

    Macs can pass Windows viruses on to other Windows machines if a virus-laden attachment is forwarded from a Mac to a Windows box. But that's their problem.

    1. Re:Virusscan on Mac OSX? by Anonymous Coward · · Score: 0

      "Why would you scan a Mac for viruses? To my knowledge, there are some trojan horses, but there aren't any OSX viruses."

      HeHe... Hey boss, they still think there aren't any viruses for the Mac. Just wait until we...
      *smack* SHUT UP YOU IDIOT!

    2. Re:Virusscan on Mac OSX? by LordSnooty · · Score: 1

      This is true, I should have been more specific and called it "malware". Which is what the banks etc really want to root out - keyloggers, form-capturing stuff, rather than the latest virus-with-an-SMTP-engine.

    3. Re:Virusscan on Mac OSX? by krakelohm · · Score: 1

      Two issues with your post...
      1."there were viruses aplenty" I disagree. There were viruses but not 'aplenty'.
      2. And as you stated a mac can pass on a virus to other machines, but its not your problem. How many virus emails do you get in a day from PC's? Is that not in turn YOUR problem? Its everyones problem.
      And what happens when there is a virus on OS X, then you have all these OS X users protection and they get creamed.
      The way I think of it is like a seatbelt, put it on just in case because by the time you need it, its too late.

      --
      You are all a bunch of idots.
    4. Re:Virusscan on Mac OSX? by ceoyoyo · · Score: 1

      I've always wondered exactly what the virus scanners for OS X do. They sit and scan, just like on a Windows machine, and they download signature updates just like on a Windows machine... must be scanning for Windows viruses?

      Macs can pass Windows viruses on to Windows machines, but you have to forward the attachment manually. As in, "hey, look, RonaldReganNekkid.pif... can't open that on my Mac... maybe my 'friend' who uses Windows will appreciate this file! I'll send it to him!"

    5. Re:Virusscan on Mac OSX? by mikek3332002 · · Score: 1

      what happens if the virus spoof /etc/hosts or %systemroot%\system32\drivers\etc\host file to redirect the av scan site to a false scan site

  11. No guaranties by BentSorenDahl · · Score: 3, Insightful
    "... which may choose to ensure their customers are not infected with a virus or spyware before they log on to their account."

    Just because the antivirus scanner doesn't find anything doesn't nessesarily need to mean that there are none.

  12. Uh, no thanks... by maillemaker · · Score: 5, Insightful

    Every time I see a pop-up advertisement that says:

    "YOUR COMPUTER COULD BE INFECTED WITH SPYWARE - CLICK HERE"

    It sends up huge red flags for me, and I always shut them down without clicking. I've seen so many of them (wanting to optimize my Windows, etc.) that I'm now gun shy of any such remote scanning application.

    I'll be thinking long and hard about letting anything scan my system through my firewall.

    Steve

    --
    A work that expires before its copyright never enters the public domain and thus enjoys eternal copyright protection.
    1. Re:Uh, no thanks... by Xugumad · · Score: 3, Funny

      "Your registry has 42 errors!"

      Yikes, I'm on a Mac, I'm suprised it's only 42 :)

    2. Re:Uh, no thanks... by BeanBunny · · Score: 1

      It's doubtfull it will scan "through" your firewall; rather it will require you to locally install an ActiveX app that will update its signature files before launching and scanning "locally." See the above posts on Trend Micro's version, McAfee's version, and now Microsoft's version.

  13. Whoa there nellie... not such a hot idea... by Akardam · · Score: 4, Insightful

    Maybe I'm a bit jaded at having been in the computer support industry for too long, but with the proliferation of nasties these days that disrupt internet connectivity in one form or another, I'm skeptical as to whether this is going to actually work. Hell, a good percentage of infections these days, be they viruses or malware, require manual cleaning, often from safe mode or self contained non-volatile bootable media. Even Symantec overwhelmingly recommends booting to safe mode to clean infections in most of their AV DB articles.

  14. eh... by FooMasterZero · · Score: 1

    Well not likley because someone is likely to scream discrimination of sorts. As in the real world everyone is *supposed* to be treated fairly even if you can't control yourself ('severely handicapped').

    I would imagine that if anything comes of this idea, is that just a server side detection mechanisim that sells ads to vistors saying something similar to spam ads like your computer is infected blah blah blah. However if that ad came from my bank and I was aware that they had this kind of service i would be more inclined to investigate further.

  15. Let me add another concern... by Hakubi_Washu · · Score: 4, Interesting

    If I were a credit institute/bank/whatever, I'd:

    Step 1: Offer virus scanning for a charge
    Step 2: Require my customers to be virus-free
    Step 3: Since I can only be sure they are virus-free after they have been checked (With my scanner, since I can't be bothered to support other peoples solutions): PROFIT!

    Add to this the legitimate question about other OSes and AV-solutions and you have a bona fide extortion scheme.
    But then, I'm a computer scientist, so I don't do "online banking" anyway...

    1. Re:Let me add another concern... by knight37 · · Score: 1

      I don't think that's a big concern. Any bank that tries this will watch their tech-savy customers flee to other banks, leaving their online services a deserted wasteland.

      --
      Knight37 - Once a Gamer, Always a Gamer
    2. Re:Let me add another concern... by nuremon · · Score: 2, Insightful

      Yes, look at how effective the tech-savvy population has been in affecting other online institution's practices... Oh wait, the average dumb computer-user still outpopulates (and breeds quicker)

    3. Re:Let me add another concern... by Hakubi_Washu · · Score: 1

      Where have I implied otherwise? Did I say "Let's all , so they don't try this scheme!"?

      I speak for mayself and myself only. And for me it is a concern, based on prior experience with "business practices". That doesn't mean I think there's anything I (or even some metaphysical "we") could or should do about it.

    4. Re:Let me add another concern... by darkmeridian · · Score: 1

      Banks cannot and probably will not do this. First, banks are heavily regulated entities. Secondly, this would be a clear violation of antitrust laws: it deprives me of a choice to use my own virus-scanner. It is a bundle of antivirus services and banking services. Lastly, banks will not do this because they cannot make too much money off of it. Who's going to use this service? Customers of online banking can move easily with their feet.

      --
      A NYC lawyer blogs. http://www.chuangblog.com/
    5. Re:Let me add another concern... by tokul · · Score: 1

      > If I were a credit institute/bank/whatever, I'd:
      >
      > Step 1: Offer virus scanning for a charge
      > Step 2: Require my customers to be virus-free

      Step 3. Customers don't want to see your virus scanning utility messing with their files and go to other bank. No profit for you.

  16. Web Based Scanning Won't Cut It by knight37 · · Score: 3, Insightful

    Who cares? Who even uses this crap? If you don't have an active virus-shield style app scanning all the time you're just asking to get infected these days. I can't count the number of times that AntiVir Personal Edition virus shield (free for individual home use) has saved me from a virus or trojan while browsing. If I had to rely on a web-based scanner I'd be infected FIRST before I knew about it later.

    --
    Knight37 - Once a Gamer, Always a Gamer
    1. Re:Web Based Scanning Won't Cut It by NatasRevol · · Score: 0, Troll

      Frankly, if you're open to getting a virus or trojan WHILE BROWSING, you're using the wrong browser/OS.

      There are plenty of options where this just isn't a possibility. Use one, any one.

      --
      There are two types of people in the world: Those who crave closure
    2. Re:Web Based Scanning Won't Cut It by bloo9298 · · Score: 1

      Really? I have never been infected with a virus, and I don't bother with anti-virus software. Yes, I do use Windows, but I monitor the system myself and run code in sandboxes when I deem it necessary.

    3. Re:Web Based Scanning Won't Cut It by eclectro · · Score: 1

      I used to agree with this sentiment. But I no longer do with the appearance of "zero day" viruses with malicious code. Add to that most virus scanners do not detect all virus' and many windows users are in a precarious position.

      You are most likely infected and just do not know it it yet. I bet 90% of Windows users are in this boat.

      I would qualify that this applies to those that are connected to the internet. And since you are posting to slashdot, I do believe you are connected to the internet.

      An "I can't be affected by a virus" is a very arrogant attitude to have these days.

      --
      Take the cheese to sickbay, the doctor should see it as soon as possible - B'Elanna Torres, "Learning Curve"
    4. Re:Web Based Scanning Won't Cut It by Anonymous Coward · · Score: 0

      If I relied on a virus scanner for online security instead of common sense, I'd be infected too.

    5. Re:Web Based Scanning Won't Cut It by pebs · · Score: 1
      I would qualify that this applies to those that are connected to the internet. And since you are posting to slashdot, I do believe you are connected to the internet.
      An "I can't be affected by a virus" is a very arrogant attitude to have these days.


      How about an "I'm not very likely to be affected by a virus" attitude?
      $ uname -a
      Linux pebs 2.6.12-10-k7 #1 Fri Nov 18 12:46:18 UTC 2005 i686 GNU/Linux
      or
      $ uname -a
      Darwin pebsmac-Computer.local 8.3.0 Darwin Kernel Version 8.3.0: Mon Oct 3 20:04:04 PDT 2005; root:xnu-792.6.22.obj~2/RELEASE_PPC Power Macintosh powerpc
      But seriously, on a Windows PC I don't bother with realtime scanners (of any kind, virus or spyware). If a zero-day exploit is gonna get past it, what is the point in taking the performance penalty anyway? I only run a nightly ClamAV scan, that's it. It's a slight risk, but one I'm willing to accept considering how I use my PC. Most exploits happen through Internet Explorer, official IM clients like AIM, and mail trojans and other kinds of trojans; and none of those affect me.
      --
      #!/
  17. Reporting to the bank ? by duplo1 · · Score: 1

    I must admit that I didn't read TFA but the summary suggests that banks could reject logins from infected computers. Clearly the scan result would have to be submitted to the bank server, or a client-side script could verify the negative scan result. This would be much cheaper than using server/agent solution that many corporations employ for corporate desktops and applications. Of course this would force viruses to spoof these results, thus negating any benefit until the information is cryptographically protected. Not a bad idea.

  18. I've got a better idea by Anonymous Coward · · Score: 0

    Why don't you just sell this to the banks and other online services so they can now offer it to their customers for free as being part of a featured advertisement. I can see a ton of people being inclined to choose the online banking service that offers free online anti-virus rather than the one without it. Plus, it can then be controlled and updated by people actually knowing what they're doing rather than leaving it in the hands of Joe Schmoe. It's a win win for everybody. Customers get more security and for free, banks get more security and more customers.

  19. Punk Buster by LiquidCoooled · · Score: 5, Interesting

    This model for killing viruses sounds very much like the code gamers are getting used to seeing.

    Its down to trust.

    Before you can come on MY website, you have to run MY code. If you run my code and it gives the wrong result, then your fucked.

    Problems, OS dependence, other people have mentioned already, but another is security - what kind of permissions do I have to give to allow arbitary code to be run which can access the running list of applications and OS internals, how do I know the code being run is safe?

    Would you really feel safe opening up so much of your machine for a general internet site?

    We are moving away from internet explorer and the nightmare of activeX, lets not go back to it.

    After thought, if the banks implimented this as a standalone application and it did this scan as part of its initial authentication (like the gaming world), I would be less bothered than expecting this kind of code to be run in a browser. strange isn't it.

    --
    liqbase :: faster than paper
    1. Re:Punk Buster by lgw · · Score: 1

      very much like the code gamers are getting used to seeing.

      Very true. But then, I've been driven away from online FPS games because of this. It seems like every game these days wants to run some scanner as admin that's going to capture who-knows-what information from my machine. Not gonna happen. And I'm not going to set up a gaming-only machine just to allow some server admin to invade my privacy.

      --
      Socialism: a lie told by totalitarians and believed by fools.
  20. Bad idea by Anonymous Coward · · Score: 1, Insightful

    So, in order to access my bank account, I have to agree to let the bank install software on my computer that will examine all the files and programs running on my computer and report back to the bank. If I don't agree with their policy, I don't get to have a bank account? Whatever happend to unreasonable search an seasure laws?

    1. Re:Bad idea by everphilski · · Score: 1

      Whatever happend to unreasonable search an seasure laws?

      Online banking is an option. Use the physical bank if you are paranoid.

      -everphilski-

  21. 4 hours to do online banking? by sckeener · · Score: 3, Insightful

    Are they only going to scan active processes running? My virus scans take forever.

    I can imagine trying to connect to my bank and waiting for the virus scan. I will getting bored and wander off. Then the bank would kick me off due to inactivity because it finished the scan while I wasn't looking.

    --
    "Only one thing, is impossible for god: to find any sense in any copyright law on the planet." Mark Twain
    1. Re:4 hours to do online banking? by Avohir · · Score: 1

      it will most likely be a "stinger" style scan, only checking for major known threats. And since the threats Symantec knows about could fit onto a postage stamp, my guess is scan time wont be an issue

      --
      To err is human, to really foul up requires a computer
  22. ActiveX loveliness? by Gothmolly · · Score: 1

    So lets get this straight:

    I log into my online banking site.
    It downloads (perhaps w/o my permission) and ActiveX component that scans my system.
    It says I'm ok, so I can log in.

    Except what if I have ActiveX disabled?
    What happens if I use a Mac/Linux/BSD?
    What happens if my native language isn't English?
    What happens if I'm not running WinXP2000Plus?
    What happens if I am running IE version 5.5.0123456 with HotFix 7890?

    This sounds like a "hey we need money, and our traditional channels aren't making enough, so lets create a ficticious need, and then offer a solution to it!" move.

    --
    I want to delete my account but Slashdot doesn't allow it.
    1. Re:ActiveX loveliness? by Xugumad · · Score: 1

      Oh, oh, and:

      What happens if I haven't set my computer up in such a dumb way as to delibrately allow web sites to scan my HD.

      I'm twitchy enough about letting Javascript run on my system, I avoid Active X like the plague...

    2. Re:ActiveX loveliness? by Anonymous Coward · · Score: 0

      Except what if I have ActiveX disabled?

      You'll be asked to upgrade your browser.

      What happens if I use a Mac/Linux/BSD?

      You'll be asked to upgrade your browser.

      What happens if I'm not running WinXP2000Plus?

      You'll be asked to upgrade your browser.

      What happens if I am running IE version 5.5.0123456 with HotFix 7890?

      You'll be asked to upgrade your browser.

  23. I think your missing the point people.. by msimm · · Score: 2, Insightful

    What interest is it of the banks to purchase such a product? Everything comes down to the bottom line, hows this going to help?

    Just because some exec comes up with a snassy (new?) idea and starts talking it up doesn't mean it will find its home in the marketplace.

    To me this sounds annoying, plain and simple. As a bank exec I'd really be scratching my head trying to figure out how my customers win (which makes me win).

    --
    Quack, quack.
  24. Let your voice be heard BEFORE it happens by jacobcaz · · Score: 1

    Maybe it's time to start a letter writing campaign? Make your voice heard before this happens. Banks like you keeping your money there, if they start getting letters from members letting them know accounts will be closed before this becomes defacto for online banking it will carry more weight.

  25. You do not run your code on my computer by techmuse · · Score: 1

    Any bank that tried this would loose my business that day. You do not blackmail me into running your code on my computer. Why should I trust your code, or even allow it on my machine? Why should I pay for the privilege of accessing my own money through the bank? And why would a bank care what I check my balance with anyway? I'm not uploading files to the bank, I'm sending HTTP requests over SSL to its web server. If I can somehow infect its servers from my computer, the bank has a HUGE problem (there is no reason why this should be possible.) Plus, I have my own virus scanning software, and no interest in purchasing theirs too. So try to pull that one, you loose a customer immediately.

    1. Re:You do not run your code on my computer by DrSkwid · · Score: 1

      Loose customers are good, they can catch all the loose business.

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    2. Re:You do not run your code on my computer by Anonymous Coward · · Score: 0

      I'm not uploading files to the bank, I'm sending HTTP requests over SSL to its web server. If I can somehow infect its servers from my computer, the bank has a HUGE problem (there is no reason why this should be possible.)

      Unless they're running an unpatched IIS.

    3. Re:You do not run your code on my computer by Arimatheus · · Score: 1

      Right, and then when you need to dispute the charges made to your debit card because someone got access to your account they're out the money - you do realize that the financial institutions are the ones that cover those costs, don't you?

      --
      OEÉæÁÄZÝÈA OEÉæé_CX
  26. Norton used to be decent. by beeswax · · Score: 3, Informative

    Norton was decent when Peter Norton used to run the show. When he sold his company to Symantec, I have noticed the software turn into bloated crap. People seem to believe Norton is the best still, it used to be great in the mid-90s, but now it is garbage.

    For anyone that buys Norton, I would try Nod32 instead, I think it is the best one out there if you're willing to spend money.

    For those of you who prefer a free antivirus, I would try Antivir, it is much better than AVG.

    1. Re:Norton used to be decent. by pete6677 · · Score: 1

      Symantec is a great example of what happens when PHBs make important product decisions. Bloated crapware is an inevitable result of so many 'marketing initiatives'.

    2. Re:Norton used to be decent. by Anonymous Coward · · Score: 0

      What about their support policy on the website http://www.free-av.com/:

      4. Unfortunately, we are unwillling to respond to your questions per email personally!

  27. Trend Micro already does this... by MI_Siberian · · Score: 1

    Nice of Symantec to decide to catch up. TrendMicro's House Call site offers an free online virus scan that is able to detect and remove any virus that can be removed with their other products. It's an ActiveX control based scanner though so it's not cross platform, though the biggest need for this service is by far windows. Very useful site, has saved me a ton of headaches with remote users who have been infected by viruses that have taken down their local virus scanner (usually symantec) by killing it's process.

    1. Re:Trend Micro already does this... by Anonymous Coward · · Score: 0

      bah. didnt work on my win2k box.
      2005-12-08 12:46:42.550 SEVERE [java:hc.impl.lib.activeupdate.UpdateImpl#Native] Update error=47, The downloaded zip file is corrupt. The downloaded file size is different from the one on the server. Please retry downloading or contact Trend Micro technical support.
      VM::Memory:3792
      2005-12-08 12:46:58.81 SEVERE [java:hc.impl.lib.activeupdate.UpdateImpl#Native] Update error=47, The downloaded zip file is corrupt. The downloaded file size is different from the one on the server. Please retry downloading or contact Trend Micro technical support.
      2005-12-08 12:47:02.878 SEVERE [java:hc.impl.lib.activeupdate.UpdateImpl#Native] Update error=47, The downloaded zip file is corrupt. The downloaded file size is different from the one on the server. Please retry downloading or contact Trend Micro technical support.
      2005-12-08 12:47:04.706 SEVERE [java:hc.applet.process.UpdateActiveUpdate] Failed to update:updating-pattern-grayware
      com.trendmicro.web.housecall.share.pattern.Pattern NotFoundException: com.trendmicro.web.housecall.share.pattern.Pattern NotFoundException: The Pattern was not found under:C:\Documents and Settings\.\.housecall\Pattern\tmadce.ptn
              at com.trendmicro.web.housecall.share.engine.Engine.g etPattern(Engine.java:358)
              at hc.applet.process.ScanSystemGrayware.run(Unknown Source)
              at hc.applet.process.ProcessQueue$Worker.run(Unknown Source)
      2005-12-08 12:47:04.737 SEVERE [java:hc.applet.process.UpdateActiveUpdate] Failed to store pattern version for pattern 'malware', caused by ; com.trendmicro.web.housecall.share.pattern.Pattern NotFoundException: The Pattern was not found under:C:\Documents and Settings\.\.housecall\Pattern
      2005-12-08 12:47:04.737 SEVERE [java:hc.applet.process.UpdateActiveUpdate] Failed to store pattern version for pattern 'grayware', caused by ; com.trendmicro.web.housecall.share.pattern.Pattern NotFoundException: The Pattern was not found under:C:\Documents and Settings\.\.housecall\Pattern
      2005-12-08 12:47:04.737 SEVERE [java:hc.applet.process.UpdateActiveUpdate] Failed to store pattern version for pattern 'system-malware', caused by ; com.trendmicro.web.housecall.share.pattern.Pattern NotFoundException: The Pattern was not found under:C:\Documents and Settings\.\.housecall\Pattern\tsc.ptn
      2005-12-08 12:47:04.737 SEVERE [java:hc.applet.process.UpdateActiveUpdate] Failed to store pattern version for pattern 'system-grayware', caused by ; com.trendmicro.web.housecall.share.pattern.Pattern NotFoundException: The Pattern was not found under:C:\Documents and Settings\.\.housecall\Pattern\tmadce.ptn
      com.trendmicro.web.housecall.share.pattern.Pattern NotFoundException: com.trendmicro.web.housecall.share.pattern.Pattern NotFoundException: The Pattern was not found under:C:\Documents and Settings\.\.housecall\Pattern
              at com.trendmicro.web.housecall.share.engine.Engine.g etPattern(Engine.java:358)
              at hc.applet.process.ScanStorage.run(Unknown Source)
              at hc.applet.process.ProcessQueue$Worker.run(Unknown Source)

    2. Re:Trend Micro already does this... by femoric · · Score: 1

      symantec also has had a similar free online scan for quite some time now.

    3. Re:Trend Micro already does this... by MI_Siberian · · Score: 1

      Last time I tried to Symantec's wouldn't disinfect though, it just pointed and the virus and went "OMG Go buy our product now!"

    4. Re:Trend Micro already does this... by swv3752 · · Score: 1

      Norton has been doing this for quite a while as well, though Trend-Micro did it before them.

      --
      Just a Tuna in the Sea of Life
  28. Before offering it for sale to service providers.. by cecil36 · · Score: 1

    I would tell Symantec that their product must be able to run as advertised on additional hardware and software platforms. If poorly designed and implemented, there will be a huge detrimental impact to consumers who will get angry with their online banks, merchants, or even their ISP and could very well stick it to these companies and Symantec where it counts...the pocketbook.

  29. Symantec and Norton nearly as bad as the viruses by DulcetTone · · Score: 1

    The clumsy, bloated feel to the leading AV "solutions" always seem pretty much like spyware to me.

    Long processes running at startup.
    Little do-nothing-of-value icons in the task tray.
    Pop-up windows artlessly trying to sell me a subscription renewal, and referring me to a web page with so many links and visual clutter than I don't even know which product thereon is MINE.

    I do all the computing I can these days on my Powerbook, and try to restrict the types of computing on the XP box to those which reduce my risk to the utmost. When I even think of viruses, I run one of the vastly more considerately crafted second-tier players such as Grisoft -- ones that run on a "when you invoke them" basis, and don't sit there trying to secure the many vulnerabilities of day-to-day WIndows use.

    There are so many threats these days that the best defense, I feel, has to center on avoiding the most attacked platform or your computing time is largely spent actively offsetting risk. Don't want to get wet? Come in out of the rain.

    tone

    --
    tone
  30. A new level of technological advancement... by suitepotato · · Score: 1

    ...to the rear! Now NAV can bone your PC over the Internet without having to do it the old fashioned way by installing it!

    Oh joy. All we need is a BHO that leeches onto ports 25 and 110 in IE just waiting for an IE weakness to be exploited turning every open browser into an open relay, never mind is bogged down by system processes causing it to pause long enough to timeout connections to your mail server.

    --
    If my grammar and spelling are off, I am [distracted/tired/careless] (take your pick)
  31. Call Me Crazy... by Avohir · · Score: 1
    but shouldn't they put effort into making their anti-virus work locally before they try to put it on the web?


    show of hands, how many of you have seen Norton stop being enabled at startup for no apparent reason? How many of you have found a virus norton either A. cant remove, or B. cant find. Ever noticed how much memory it takes up even when you're not running a scan? How many friends and family do you know who have just let their protection expire because their subscription renewal service was too laborious to slog through?


    They've got the cart several miles ahead of the horse, and its sad because way back in the day, Norton was truly a great product. Unfortunately it has become a Frankenstein's monster of bloated ineffectiveness, and it shows no hint of reversing the trend. I'll stick with http://www.nod32.com/ for now.

    --
    To err is human, to really foul up requires a computer
    1. Re:Call Me Crazy... by Esion+Modnar · · Score: 1
      Norton was truly a great product

      Yep, but not anymore. When I removed NAV from one of my customer's computers, it saved over 3 minutes in bootup time. Unfortunately, he had already bought the product before asking me first.

      Recently, I saw a deal for Norton, where after rebate you could get the product for free. I just kept on walking.

      --

      They say the first thing to go is your penis. Well, it's either that or your brain. I forget which...
    2. Re:Call Me Crazy... by BFaucet · · Score: 1

      So true!

      What's really sad is the unwashed masses don't realize their little Norton programs don't protect them from crap! They aren't the least bit cautious of opening that unexpected zip archive their friend sent them.

      Whenever a friend/family member asks me to get rid of a virus I uninstal Norton before even trying to get rid of the virus and install AVG Free.

      --
      -Derick
  32. So now they want us to pay twice by Anonymous Coward · · Score: 0

    "This could be paid for by the customer"

    Um I don't think so. How about the cost could be absorbed by the bank. Any bank that tried to pass this cost onto me would lose my custom. I already have antivirus protection on my PC... why the hell should I pay for it again?

  33. Quite worrying... by Bert64 · · Score: 3, Insightful

    If consumers get used to allowing their banks to execute code on their systems, then they become even more vulnerable to phishing scams... Phishing sites will have their own "virus checking" tools, just like the real banks, except these tools will install malware instead of trying to remove it..

    Also virus checkers will be useless against more targetted attacks which are being seen more often nowadays, small attacks against customers of a particular organisation which don`t become widespread enough to get noticed by antivirus vendors..

    And finally those of us not using windows systems or not using ie may get turned away since we're not able to run the virus checker (and most likely wouldn`t need to in any case).. I don`t think firefox provides a way to execute code with access to your local filesystem (for obvious security reasons) in the same way that activex does.

    --
    http://spamdecoy.net - free throwaway anonymous email - avoid spam!
  34. Said it before and I'll say it again by Anonymous Coward · · Score: 0

    Anti Virus is a racket

  35. And drive a car powered by propetual motion by qray · · Score: 1

    By delivering security features such as virus scanning online, Sykes believes the footprint of its applications will no longer be an issue: "Once you move to the service situation then the footprint becomes almost irrelevant.

    So by this reasoning, if we made the OS, word processors, spreadsheets all services, we could all go back to the orignal 64k PC's with 8088's running at 4mhz? I think I still have my Timex Sinclair with 16k at home, maybe I'll be able to put that to some use now.
    --
    Q

  36. Oh brother. by Chr0nik · · Score: 1

    What happens to all this talent and product they are absorbing by sucking up all these small (and large)companies? Surely someone at symantec knew this was silly.

    Why doesn't symantec sell any of @stakes products? What are those guys doing now?

    Seems like a lot of things they acquire just stagnate or simply cease to exist alltogether.

    I'm actually afraid that that might happen with the veritas purchase.

    Don't get me wrong they are on the ball with a lot of stuff, but this kind of thing really gets you scratching your head.

    --


    ... what did you expect, something profound?
    1. Re:Oh brother. by Anonymous Coward · · Score: 0

      I'm actually afraid that that might happen with the veritas purchase.

      Be afraid. The Veritas office layoffs have started.

  37. crapware and misleading advertising by micromuncher · · Score: 1

    Once Norton Utilies was good, Partition Magic was good, and NAV wasn't annoying. Now NAV significantly slows down performance, and for the personal edition, requires it revalidate itself over the internet all the time REQUIRING user input. So... I removed NAV from most of my computers; NAV is supposed to be seamless. And some of us STILL want to check for viruses offline.

    Personally, I think this is an attempt by Symantec to grab an opportunity for advertising revenue.

    And Symantec already has TOTALLY BOGUS REBATE OFFERS. I bought All of the above products (though NAV was an OEM bundle). When I upgraded every one of them with the promise of rebate, I got 3 rejection letters. First, they said they couldn't find my previous registration for PM or accept my s/n (though I religiously register, cause it was PQ, so they didn't move over support etc.) Next, they didn't allow my OEM as an "upgrade". The only reason I bought the software was because of the rebate; and the processing (3 months) meant that it was way too late to return. Not to mention that Symantec's PM handily corrupted every volume I merged.

    Anyway... crapware... liars... don't buy the products...

    --
    /\/\icro/\/\uncher
    1. Re:crapware and misleading advertising by amrust · · Score: 1

      I wish I could mod this up, for the rebate info. That's just sad.

      --
      VOTE!
  38. What about the wait by chrisjwray · · Score: 1

    A typical norton scan of my PC takes about 40mins. Does this mean I cant log into my online banking until the scan is finished and the results sent back. I could walk to my branch quicker than that!!

    What about the poor people on dial up connections.

  39. Yes sir, by eheldreth · · Score: 1

    we can fix this weak gate guarding your fort, all we need to do is cut hole from this part of the wall and plaster it into place at the gate. I mean using an internet service to scan for a virus is just aking for problems. It can, will, and is probably as we speak being hacked and exploited to the whims of the black hat masses. If its not on your computer how can you trust it will not be used as the method of infection for some virus.

    --
    The perversity of the Universe tends towards a maximum. - O'Toole's Corollary
  40. Sorry... by mymaxx · · Score: 1

    I don't trust Symantec's junkware. Their software is slow and bloated. The day my bank requires this will be the day I find a new bank.

  41. Saves your bank time, money. by massysett · · Score: 1

    I don't think they're trying to be user friendly. They're just not interested in fielding calls from customers who have suffered fraud because some spyware keystroke logger ripped off the customer's online banking ID, which was then used to transfer money to some crook. The bank is trying to protect itself, which then in turn helps the customer. Seems like a good idea to me.

    1. Re:Saves your bank time, money. by NotoriousGOD · · Score: 1

      But this means that the bank would have a right to stop you from accessing your online bankaccount and then force you to pay for a service that's not even delivered by the bank, but a third party. And secondly, how in the world is anyone going to transfer a virus or keystroke logger by logging into their bank account. Maybe the banks should get a better web programmer and look up the definition of 'security' in a standard dictionary.

      --
      Where all think alike, no one thinks very much.
    2. Re:Saves your bank time, money. by Rakarra · · Score: 1
      And secondly, how in the world is anyone going to transfer a virus or keystroke logger by logging into their bank account

      That's not the concern, the banks are worried about people who already have keyloggers installed that will snoop the account information when the user logs into the bank online site.

  42. lol, stupid fuckers by DrSkwid · · Score: 1

    I bank with $sys$Sony, scan away

    --
    There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
  43. For security: customized version of Mozilla by Anonymous Coward · · Score: 0

    Banks could make a version of Moz. (with custom interface even) that *only* connects to their system and breaks the web -- this would stop the trojans from snooping passwords, be free to users, be relatively small to use, and be an easy choice for people who are worried about viri on their machines.

  44. I thought they already were... by EWIPlayer · · Score: 1

    I mean, last time i looked on my favourite torrent site, it was already there.

    --
    This sig used to be really funny...
  45. The banks should not charge you by tscheez · · Score: 1

    I would have a problem if my bank wanted to run some software on my computer. But that is me, and I am sure alot of the /. crowd. However, the basic user may not care about viruses. If their software finds a virus/spyware app it should remove it free of charge, it also should point the person to somewhere to get a good reliable AV software. It is in the bank's interest to keep the computer virus free, since if your account is accessed and used fraudulently, they are going to replace the money in your account. Anything to prevent a several hundred dollar loss if it costs them $.05 it would be worth it to them.

    --
    Supplies!
  46. This is about their security by Inaffect · · Score: 0, Flamebait
    I'm willing to bet that this is an issue of software piracy prevention, and really has very little to do with better anti-virus protection. Symantec has been releasing the same product over and over for years with miniscule changes... Now if they move their subscription-based services strictly to online use, maybe they can get some of the people that are using the software illegally out of the picture.

    Most people on a tight budget who are wising up are probably going towards AVG, Avast, and other free virus protection software for Windows anyway - is Norton Antivirus even useful anymore? (psst.. the answer is no)

  47. Virus Scans Galore! by WolfZombie · · Score: 1

    Nice, now when I do my online banking, I'll have to use their virus scan. When I go pay my credit cards online, I'll have to use their virus scan. When I go pay... well, you get the point. Leave ensuring my computer is clean up to me and whatever software I choose to use.

  48. It's Stories like these.... by megarich · · Score: 1
    That makes me glad I don't partake in online banking :)

    On that note I can see both sides of the issues. I can see the concern of those who use online banking but at the same time if your virus infected machine somehow infects the banks servers(shouldn't be an issue but you never know) or causes all of your money in your accounts wiped out, guess who has to spend valuable resources to clean up your mess?

  49. Sigh-mantec Anti-Virus by digitaldc · · Score: 1

    I just spent 45 minutes trying to figure out all the different things Norton AV put on my computer, then disabling them, and later uninstalling the thing altogether, why would I want to go through all that hassle again with my online banking?

    --
    He who knows best knows how little he knows. - Thomas Jefferson
  50. Wow by thesnarky1 · · Score: 1
    Do I have problems with this. Lets begin:
    1. I have to get online to scan myself for virii. Ok, yea, that's not what the article is about, but it kinda seems like that's what they're moving towards.
    2. I have to use software that someone else chose, propriatary software probably, which I do not agree with, as opposed to something free, preferably open-source? Well, what about my Linux system, that I'm posting from, and I prefer for secure connections, as I trust it a lot more? WIll they support that? Or Mac? How about older, non-XP versions of Windows? I'm willing to bet no.
    3. I should rely on my "bank" telling me I have a virus, and believe them when they say "click here to fix it"? That's just begging to get exploited. Imagine a phishing trip where they get your info, AND get to install a few trojans/key loggers on your system in case you change it.
    4. "Once you move to the service situation then the footprint becomes almost irrelevant." Ok, true, but that's like putting a medic for our forces in Iraq in a bunker in Germany, then driving the medical supplies through enemy territory in an open-topped jeep! I would never trust such a system, though I do dislike Symantec's product due to it's size and speed (or lack thereof).
    5. This could be paid for by the customer using their credit card or by adding it to their mobile phone bill by sending a text message, said Sykes, who warned that banks could decide not to provide access to anyone with an infected computer.

      So, lemme get this part straight. I have to pay my bank to do all of the above which I have moral/sercurity problems with, or else I can't use their system?! What a joke! If my bank tried that I'd promptly find a new one.

    Ok, so I focused a lot on the 'bank' aspect of this, which I probably shouldn't have, but it was the most obvious that came to mind. Same goes for an ISP, however, and they could screw you much worse. Imagine if you will, a world where you have to have your computer scanned daily in order to keep your internet connection. Or every time you attempt to logon to their network you had to do a "quick" five minute scan?
    This whole idea is a joke, and I hope it never comes to pass as standard. I would much rather keep my computer protected myself, and am quite capable of that, then trust some unknown entity from the internet telling me to click here.
  51. "Symantec Hopes" by multipartmixed · · Score: 2, Insightful

    Symantec Hopes this, Symantec Hopes that..

    Symantec has been *hoping* to deliver something worthwhile ever since they stopped developing for DOS-mode.

    Face it, the Norton Utilities used to be *great*. Now they suck! Norton Anti-Virus has never been spectactular. Norton Ghost.. Well, Norton Ghost is pretty good; at least the version I have; it still runs under DOS4GW with a non-MS GUI.

    --

    Do daemons dream of electric sleep()?
  52. SecurID solution by novitk · · Score: 0

    A good solution already exists to prevent keyloggers, etc. Actually some banks are rolling it out already - http://us.etrade.com/e/t/jumppage/viewjumppage?Pag eName=secureid_enter/. Works with any device, costs $25 once (which could probably be lowered) and provides actual security.

  53. Educate rather than give a false sense of security by TheGazelle · · Score: 2, Insightful

    There are going to be risks no matter what security products a bank provides to its customers. After a year and a half working as a malware analyst, I know well that a "Clean" Virus Scan will provide customers with nothing but a false sense of security. Sober for instance has currently has 20+ variants that are known. You can bet there are plenty of malware variants in the wild that have no signatures. What the banks need to do is provide their customers with adequate computer security and let the customer decide which products are best for them.

  54. Wrong in SOOOO many ways by SHP · · Score: 0

    "The customer goes to an Internet banking site and that site has an end-point appliance that scans [their computer].

    Uh, my computer is firewalled. How are they going to scan me? Certainly they're not suggesting that I install software off the internet, and then trust it to secure my system. Perhaps they missed the part about Trusted Computing Base in the CISSP review course.

    It may say 'you have Sobig [or another infection]' and up will pop the anti-virus vendor's window that says 'do you want to fix this problem or buy a solution'," said Sykes.

    This is EXACTLY the MO Spyware is using. Gee, hit a website, get a popup that says you're infected, click here to fix. yeah, I'll click that...

    This could be paid for by the customer using their credit card or by adding it to their mobile phone bill by sending a text message, said Sykes,

    ROTFLMAOPMP [Rolling On The Floor Laughing My Ass Off Peeing My Pants]. So now I have to PAY for the privilege of them compromising the integrity of my machine? And what's up with this billing my credit card in response to a text meesage? Text messaging is rock solid secure, right? No spoofing there, no siree!

    who warned that banks could decide not to provide access to anyone with an infected computer.

    One might comment that if the security of one's account is dependent on the integrity of one's PC, then there is a problem. One would be right. What's sad is that Symantec is trying to fix the wrong problem. We need online banking solutions that are secure even when accessed from Satan's computer. That's a much harder problem to solve

    "If you don't use the service then you may not be able to log onto the Internet banking site," he added.

    I use Linux. Is there a version available for my OS?

    Additionally, never mind me trusting them, how do they trust me? Do you really think they can code something which cannot be cracked and spoofed? Do you really think that malware writers won't be able to write a wootkit that can mimick the communications between the AV agent and the backend? Come on.

    There's still some smart @stake guys at Symantec. I'll bet they're getting more embarrassed by the day....

  55. Re:Sometimes online is a good idea by Anonymous Coward · · Score: 0

    Some time ago, my windows has cought a virus that corrupt any program that you install, all antivirus that i test checked the installer and because it was corrupt refused to install. The only thing i can do was use a web antivirus that works over activex, like the panda activescan, i know that panda hasn't got one of the best antivirus but after use panda activescan i was able to install a real antivirus and solve the problem

    PS: sorry for my english

  56. 4 Steps to Profit: by amcdiarmid · · Score: 3, Funny

    Step 1: Hack Bank & have $rand clients told they are infected; Redirect to fake Norton Site.

    Step 2: Take Credit information, infect client PC; churn disk for a while

    Step 3: Make ~$5 per client suckered

    Step 4: Rent out infected PCs for $$$$$$

  57. Dissapointment by COMON$ · · Score: 1
    Dont know about you guys but I think symantec is slowly going down the crapper. For the last three years it has been easier to remove a virus than upgrade their products. Now they want to put hooks out to the web to destroy the rest of your computer?

    No I am not bitter at all towards symantec as I earn a ton of cash trying to fix computers that users try to upgrade symantec on. Or just plain uninstall. I can only imagine what this new service is going to do for them

    My advice, Symantec, fix your existing products before you unleash a new hell on all of us.

    -rant finished-

    --
    CS: It is all sink or swim...oh and did I mention there are sharks in that water?
  58. Extortion by Anonymous Coward · · Score: 0

    How would you define it?

  59. What's the point? by WhiteWolf666 · · Score: 1

    Once your system is compromised, the ONLY way to return to _known_ clean is wipe and start from _known_ good.

    When will these people GET IT THROUGH THEIR HEADS that the 'clean' 'wipe' 'quarantine' options are NOT sufficient.

    Am I totally missing something? Have I been brainwashed? AFAIK, you NEED to keep your system clean, you shouldn't be cleaning up after malware. Never had any malware on my Unix-like boxes (Mac and Linux), and I never plan on having one.

    A computer system is NOT like your body. There is no immune system that will clean up once the infection has been controlled. Rootkits CANNOT be safely removed. The analogies that these security companies make to biology do NOT make sense in the context of computing.

    I understand filtering viruses at the firewall. I understand filtering viruses at the browser, or e-mail clients/gateways. I do NOT understand malware removal.

    --
    WhiteWolf666 an exBush supporter. All you new-school,compassionate,save the children Republicans can rot in hell
    1. Re:What's the point? by ElectroBot · · Score: 1

      A computer system is NOT like your body. There is no immune system that will clean up once the infection has been controlled. Rootkits CANNOT be safely removed. The analogies that these security companies make to biology do NOT make sense in the context of computing.

      Actually their comparison of a computer to the human body is accurate enough, BUT what they don't tell us is that most Anti-Virus/Anti-Spyware/Firewall programs only work as well as a tablet of extra strength Tylenol does in trying to fight AIDS. They absolutely suck at it.

    2. Re:What's the point? by chawly · · Score: 1

      "a tablet of extra strength Tylenol does in trying to fight AIDS." They've gotten that far ? I'd thought them to be on par with a tablet of .... no, sorry, never mind.

      --
      How many beans make five, anyhow ? ... Charles Walmsley
  60. Empty words by Anonymous Coward · · Score: 0

    Pay no attention whatsoever to these empty words. Of course banks "could" deny access to spyware or virus infected computers, but he is just trying to push some fear on te average uninformed user in the hopes of selilng the services. no bank has announced such a measure and I doubt they will- they would alienate a mayority of their clients who are already accesing services from compromised computers. I don't know what the fuss is all about.

  61. Does it make any change? by vear · · Score: 1

    Instead of "Loading virus definitions" we will just see "Buffering virus definitions". Is it really worth so much work?

  62. Product vs Services by Lord_Dweomer · · Score: 1
    This is nothing more than an attempt to further milk their customer base for additional monthly revenue.

    Right now they sell the core product and require a service subscription to receive updates. This will make the software modular, enabling them to charge more for the total product and in addition to the monthly revenue streams which companies are quickly becoming addicted to (notice how just about every company is trying to turn their "product" into a "service" requiring a monthly subscription).

    --
    Buy Steampunk Clothing Online!
  63. Re:Symantec and Norton nearly as bad as the viruse by lgw · · Score: 1

    Little do-nothing-of-value icons in the task tray.

    Not to single out your comment, but I've seen this often, as a complaint about many products. "Oh no, they put an icon in my task tray, I'm doomed!". I don't get it. The task tray is the place where all the uselesss crap goes, and it hides most of itself by default. Why is this even a concern? Anyone?

    --
    Socialism: a lie told by totalitarians and believed by fools.
  64. What about false positives? by Antony-Kyre · · Score: 1

    Hasn't anyone ever got a false positive before? Won't this really hurt the truly innocent?

  65. Whose computer is it anyway ? by Quiberon · · Score: 2, Interesting

    Look, really, it's my computer. Sometimes it's private (none of anyone else's business what it's doing); sometimes I want some help checking whether it in infected with a virus, bacterium, worm, amoeba, horse, elephant, or whatever. Sometimes it's doing something confidential between me and my employer; in which case the bank had better check with my employer if they want to do anything with the computer.

  66. Re:Symantec and Norton nearly as bad as the viruse by DulcetTone · · Score: 1

    The issue is this: I know that they have determined that having a process running on my system is a good thing. For me, I have to wonder if this code is well written code that will not spin or leak memory, or is it going to cause problems like that chronically, for all the while my PC is booted up.

    Unless I can think of a good benefit that necessitates having processes running, I try to avoid the possibility that undue consequences or malicious behavior is emanating from something visually embodied by that little tray icon. There is the additional aspect to consider that oftentimes the one whose interests are being served by that ever-running little stub are not mine but the entity that crafted it.

    I guess I know some programs might be running and exposing me to the same problems without having a tray icon. But I complain about what I can see!

    tone

    --
    tone
  67. Norton is the file gods? by philason · · Score: 1

    So, if i scan with Norton, I am virus free?? That means if everyone scanned with symantec/norton, there would be no viruses, if it were only true...most of the people I help with a real virus have no Norton anymore, the malware did away with that. When did a bank ever care about anything that did not make a profit?? Show me the profit!!! There is none; End///

  68. Will making NA a web service make it faster? by TaxSlave · · Score: 1

    I had to reinstall my XP installation when I upgraded to a larger hard drive. Since I hadn't been entirely satisfied with Norton's tools lately, and had discovered other, better tools like Diskkeeper and FreeAV, I left Norton's out of the equasion. The result? My system is running MUCH faster than before. Antivirus scans of incoming emails happen near-instantaneously. Applications load in a fraction of the time they did before. I'm not getting horrible lags when playing games. The difference was amazing.

    There may be other explanations for the slowdown. I had a slower hard drive, and since it was much smaller, it was much fuller. I may have had another issue altogether causing the problem. I'm willing to consider all of that. In the end, though, I've found better tools, my computer runs faster, and I'm happier.

    I've sworn by Norton's Utilities for a decade and a half. It's hard to say I'm not going to use the product anymore, but I'm wondering if I will. The only tool I used regularly from Norton's that I haven't replaced is the recycle bin protection. I figure that's okay, since I never actually used its protection. The only interaction I ever had with it was to clean it out before a speed disk. Now, I don't have that extra step, and Diskkeeper will defragment on a schedule, and even while I work.

    Any suggestions for good, preferably free, system utilities in the Systemworks vein would be appreciated. I'd love to add some to my toolbox usb drive, to give to clients.

  69. So let me get this right... by obeythefist · · Score: 1

    The banks want to completely scan every file on my PC before they will allow me to do business with them (to make sure I am not carrying any data they consider to be detrimental).

    No way. Let's substitute some other businesses and see how it sounds.

    Sony BMG wants to completely scan every file on my PC before they will allow me to play one of their CD's (to make sure I don't have any copyright infringement apps). Well actually I guess the rootkit does this kind of stuff for them anyway.

    Disney wants to completely scan every file on my PC before they will allow me to play a DVD on my PC (to make sure I am not a copyright infringer) - if they do find something it will be easy to send the evidence upstream and initiate a lawsuit automatically.

    I remember back in my day we used to have the illusion of privacy, and we liked it! Have corporations just given up trying to pretend they care about our own rights as individuals now?

    --
    I am government man, come from the government. The government has sent me. -- G.I.R.
  70. performance hit? by elmurado · · Score: 1

    Can Symantec promise me that they will slow down my PC with a bloated online service like rtvscan like they do with their Norton program? Otherwise I'd never know it was working hard for me...

  71. There's that filthy subscription model again... by macraig · · Score: 1

    rearing its ugly head. Yep, getting gobs of cash EVERY month is a whole lot more attractive than simply getting it at point of sale.

    Just say no!

  72. Credit where credit is due by Xugumad · · Score: 1

    Hadn't expected everyone to think this is so funny, but as they are, should point out that's my flatmate's joke originally...