Slashdot Mirror


Anti-malware Vendors Stare Down Microsoft Threat

Captain Rose writes "Matt Hines at eWEEK has stepped up to report the other side of the story CNET inked recently on the perceived death knell that Vista will deliver to independent anti-spyware vendors. There's definitely a fight in store (David v. Goliath), though who knows how long we'll have to wait to see it play out now that Vista's delayed yet again. Is this a bit of foreshadowing on how the new Microsoft OS will address the self-replicating, zero-day spyware threats?" From the article: "Most industry watchers concede that it will be hard for Microsoft to easily displace the enterprise security businesses of leading vendors such as Symantec, McAfee and Trend Micro, which market integrated packages of applications to companies wishing to solve long lists of problems. However, for firms that are focused on only one of those problem areas, analysts said, Vista and the other Microsoft security products could pose a significant threat."

207 comments

  1. Don't worry! by VincenzoRomano · · Score: 0

    Don't worry about that!
    They told the same about anti virus, web browsers and office suite!
    The more MS will try to accentrate, the worse the products! It's history!

    --
    Maybe Computers will never be as intelligent as Humans.
    For sure they won't ever become so stupid. [VR-1988]
    1. Re:Don't worry! by Anonymous Coward · · Score: 0

      Nessun'entrata ha trovato per 'accentrate '.

      Forse avete significato cercare 'centralized '?

    2. Re:Don't worry! by XMilkProject · · Score: 5, Insightful

      Don't worry about that! They told the same about anti virus, web browsers and office suite!

      Perhaps you should evaluate the logic of your statement?

      Microsofts web browser put the competition out of business. (and got themselves in a bit of a legal battle too)

      In the 80's and 90's Word Perfect was the defacto standard for an office suite, and Claris Works was popular on the mac. Then microsoft brought out it's office suite, and has all but put the competition out of buisness.

      Not sure where you are going with the anti-virus, since Microsoft has never released one. But when they do, I'm pretty confident it'll steal the market share too.

      The point i'm trying to make, is that while all of us know that plenty of non-microsoft products are becoming available, and are even better products in many cases, the fact still remains that microsoft obliterated the competition in all of these areas and only the FOSS community is able to gain any traction at all.

      You gotta remember that just becuase you and I use FireFox and OpenOffice.org, doesn't change the fact that 99% of computer users are on Internet Explorer and MS Office.

      --
      Big ones, small ones, some as big as yer 'ead!
      Give 'em a twist, a flick o' the wrist...
    3. Re:Don't worry! by VincenzoRomano · · Score: 1

      You're right.
      But neither Firefox/Opera nor Openoffice (just to mention sw that runs under MS OSes) is dead! And MS is to keep an eye on those 0.01% sw not to loose too much!

      --
      Maybe Computers will never be as intelligent as Humans.
      For sure they won't ever become so stupid. [VR-1988]
    4. Re:Don't worry! by fireman+sam · · Score: 3, Interesting

      Microsoft has gotten away with the browser bundling because it was a first offence.

      I have word that the bigger players in the anti virus/malware markets have preempted Microsoft and are already being advised by relevant legal departments. They (the AV/M companies) cannot do anything unless Microsoft bundles competing software. But as soon as they do, you can be assured that if there is any drop in revenue seen by the AV/M companies, Microsoft will find itself in court again. Next time it will not be a first offence.

      --
      it is only after a long journey that you know the strength of the horse.
    5. Re:Don't worry! by XMilkProject · · Score: 1

      I expect that you are right about them ending up in court, but why on earth would this not be legal?

      You can't add components to your software product becuase someone else already sells those components and stands to lose money? I don't get it... What is the legal precedent here?

      --
      Big ones, small ones, some as big as yer 'ead!
      Give 'em a twist, a flick o' the wrist...
    6. Re:Don't worry! by MBCook · · Score: 3, Insightful
      I have to wonder at what point will people stop and think to themselves "MS made this buggy OS that needs anti-virus software and anti-spyware software, so why am I trusting them by buying their anti-whatever software?"

      That will hit some people. Not everyone, many not most, but some. Maybe then a bigger backlash will start. It will probably depend on if the anti-whatever software is free or not.

      You've got to love the oddity of it all though. What if tomorrow Oracle released a version of their software that would randomly drop tables? Let's say for the sake of argument that everyone used it anyway. What if Oracle's solution was to sell you software that would catch that happening and instantly put your table back?

      What if your Ford car would randomly stall, and Ford's solution was to give you a anti-stall upgrade on your car?

      I hope Vista fixes a lot of this (I'm on OS X so it doesn't matter), because it is just mind-bending if you think about it.In what other industry (other than possibly government) would this kind of thing be accepted so well?

      --
      Comment forecast: Bits of genius surrounded by a sea of mediocrity.
    7. Re:Don't worry! by Anonymous Coward · · Score: 0

      Exactly, there was a free online virus/malware scanner I was using, and then I read it got purchased from Microsoft. Used the software for another month or so...no longer free, had to pay for the service. And it was a damn good scanner, it would find viruses/malware that Norton and the likes didnt even detect.

    8. Re:Don't worry! by courtarro · · Score: 2, Interesting
      "In the 80's and 90's Word Perfect was the defacto standard for an office suite, and Claris Works was popular on the mac. Then microsoft brought out it's office suite, and has all but put the competition out of buisness."

      This fact doesn't support your argument concerning bundling because these products are not necessarily included in Windows. Rather, the fact that Office became the standard is either due to a) improved quality over the competition, or b) improved marketing over the competition, neither of which is illegal. When you buy a stock computer from a company like Dell, they most often include WordPerfect by default, and you have to pay an extra $NNN to have Office included instead. People must make an active decision to pay extra for the product, so if they have it, they must feel that it's worth it. If Corel is losing money as a result of people making this decision, it's their own fault, one way or another.

      The strange thing about this article is that it makes MS out to be the bad guys. Viruses and spyware feed on weaknesses in the OS, therefore so do anti-virus and anti-spyware products. When Microsoft improves the security of their OS and therefore hurts the businesses that leeched on those holes, are they really the bad guys? All MS does is improve the experience built into the operating system. How is it their fault to make an operating system that fixes itself, even if the "fixing" is done by a part of the system that happens to be called "MS Antivirus" or "MS Antispyware"?

    9. Re:Don't worry! by fireman+sam · · Score: 2, Interesting

      It isn't illegal if you are not a convicted monopoly. But a company using its dominance in a market to squash competition is considered anticompetitive and a violation of antitrust laws (http://en.wikipedia.org/wiki/Antitrust).

      If Microsoft want to get into the antivirus/antimalware market, they are free to develop (or purchase) a product, market it and sell it. They just cannot bundle it with Windows as this would be seen as an attempt to squash the existing companies (who compete on product price, quality, etc) out of the market.

      --
      it is only after a long journey that you know the strength of the horse.
    10. Re:Don't worry! by Grishnakh · · Score: 1

      You gotta remember that just becuase you and I use FireFox and OpenOffice.org, doesn't change the fact that 99% of computer users are on Internet Explorer and MS Office.

      You're painting a rather bleak picture here. I don't know about OO.o, but Firefox is widely credited with having at least 10% marketshare, and some websites are reporting now that over half their visitors are using Firefox (most on Windows). These aren't even websites you'd expect to have an audience of mostly OSS supporters, so it shows that Firefox is rapidly becoming very popular among general Windows users.

    11. Re:Don't worry! by gartogg · · Score: 1, Insightful

      Just to be a bit of a contrarian (and ridicule others for their lack of ridiculously trivial knowledge,)

      Anyone remember MSAV.exe? They never updated it, and let it die when they moved to windows 95. Kind of like when they let IE die after 6.0. Oh, and wqhen's the last time Word had a feature that wasn't wither copying a competitor, or a really stupid idea? (Like animated helpers.) What was new wasn't useful, and what was useful wasn't new...

      So we'll actually say you're wrong on 2 counts - they can compete, but don't innovate or create good products - if they do what they did with IE, we'll have more bugs and viruses infecting the antivirus software than we did in the entire OS until now.

      And, to paraphrase, MS Word isn't evil, it's just crappy, bloated sofware

      --
      I'm a concientious .sig objector.
    12. Re:Don't worry! by gstoddart · · Score: 2, Insightful
      Microsoft has gotten away with the browser bundling because it was a first offence.

      I have word that the bigger players in the anti virus/malware markets have preempted Microsoft and are already being advised by relevant legal departments. They (the AV/M companies) cannot do anything unless Microsoft bundles competing software. But as soon as they do, you can be assured that if there is any drop in revenue seen by the AV/M companies, Microsoft will find itself in court again. Next time it will not be a first offence.

      And, because the DOJ actively stopped caring about the whole anti-trust issue and left it alone. This is because they were told by the administration they weren't interested in the case.

      Someone better hope they have awful deep pockets -- if M$ takes away your revenue stream, and can make it takes years to go through court, and if the DOJ isn't strongly motivated to do something, those companies will be out of business long before they resolve anything.

      Microsoft has taken away a lot of people's candy by doing such things and just out-waiting them. If the government is not going to intervene, it will happen again quite easily.
      --
      Lost at C:>. Found at C.
    13. Re:Don't worry! by mjm1231 · · Score: 1
      "Not sure where you are going with the anti-virus, since Microsoft has never released one."

      You forgot about MSAV?

      --
      Ideology: A tool used primarily to avoid the bother of thinking.
    14. Re:Don't worry! by Jaysyn · · Score: 1

      I've never seen Wordperfect bundled with a Dell. MS Works on the other hand......

      Jaysyn

      --
      There is a war going on for your mind.
    15. Re:Don't worry! by drivekiller · · Score: 1

      As noted by others, it's not legal because Microsoft is a monopoly and the anti-virus companies could easily make the case that bundling by Microsoft is an illegal use of monopoly power to get into a market they don't currently control (or something along those lines.) So to avoid messy lawsuits, Microsoft needs only to design and market a secure operating system. They don't technically get more money, as they don't have an add-on product to sell-- but the anti-virus vendors basically go out of business and the cost of owning a PC goes down, which helps Microsoft keep the price of its software afloat. Of course, with their cash reserves they'll probably find it easier to just litigate.

    16. Re:Don't worry! by massysett · · Score: 1
      Not sure where you are going with the anti-virus, since Microsoft has never released one.

      Actually DOS 6 used to ship with antivirus. Hardly anyone would remember it though. Remnant I found. MS got out of antivirus in a hurry. Even this product was licensed from Central Point.

    17. Re:Don't worry! by Anonymous Coward · · Score: 0

      Microsoft had nothing to do with Netscape's demise, except create a product to fill the coming void. Netscape imploded due to it's own plethora of leadership failures.

      If bundling is such an issue....why are iTunes and WinAMP (or Foobar) so damn popular, considering Windows has bundled a media player since 3.1?

      Why do ICQ, AIM, and Jabber exist, when MSN IM has been around for many years now?

      Why does Google Exist, nay, outperform, despite MSN Search being the default search engine in IE?

      Bundling does nothing but complement the usefullness of the OS Suite. It is *not* anti-competitive, and it does *not* choke out the competition. The only "proof" that it does (Netscape, even WordPerfect) is far from telling.

    18. Re:Don't worry! by Ucklak · · Score: 1

      I deployed some NT4.0 Workstation laptops (obviously a long time ago) and the default installation from Compaq had Corel's Office suite.

      --
      if you steal from one source, that is plagiarism, if you steal from many, well, that's just research.
    19. Re:Don't worry! by Anonymous Coward · · Score: 0

      Wordperfect wasn't killed by bundling. Word was *never* bundled by MS with Windows.

      Wordperfect died from apathy. (Much like Common Sense)

      Other than that, you're spot on.

    20. Re:Don't worry! by norman619 · · Score: 1, Funny

      "So to avoid messy lawsuits, Microsoft needs only to design and market a secure operating system. They don't technically get more money, as they don't have an add-on product to sell-- but the anti-virus vendors basically go out of business and the cost of owning a PC goes down, which helps Microsoft keep the price of its software afloat." LOL that's all they need to do huh? "design a secure OS." You obviously don't know a whole lot about why Windows has the issues it has. It's not simply crappy code. It's a victim of it's own success. Windows is the most attractive dragon in the land and hackers, crackers, virus coders are the Dragon Slayers fighting for bragging rights or just looking to piss it off. No matter how secure your OS is if it's the OS used by 99% of system in the market guess where the hackers and so on are gonna put their energies? no matter how secure youe Os is someone will find a chink in your armor and share the info and soon you will be in the same situation Windows is in now.

    21. Re:Don't worry! by CheeseTroll · · Score: 2, Insightful

      I'm curious as to how they will define "anti-virus" or "anti-spyware" software. If MS releases a patch, or plugs a hole in its firewall to prevent infection, does that count? I see the 3rd-party vendors being forced to define their market *very* narrowly in order for their claims to stand up in court.

      --
      A post a day keeps productivity at bay.
    22. Re:Don't worry! by andy_t_roo · · Score: 1

      As there is currently no market for 'windows vista security tools', why would it be illegal for Microsoft to release an operating system with a 'preemptive security hole blocker', that just happens to mitigate the need for specialised and separate antivirus software on this new operating system?

      Sure, i can see semantic and the other companies becoming a little annoyed at a lack of a market for their products on vista, but i don't think it would be illegal.

      besides, people would (probably) still be able to turn it off and run a product from a different vendor (refer to FireFox becoming more popular)

      Andrew
      --
      eagles may soar, but weasels don't get sucked into jet engines

      (for the record IANAL, i use zonealarm and avg, and this is posted from firefox)

    23. Re:Don't worry! by drew · · Score: 1

      Next time it will not be a first offence.

      So next time they'll get a slightly larger slap on the wrist?

      --
      If I don't put anything here, will anyone recognize me anymore?
    24. Re:Don't worry! by Viper+Daimao · · Score: 1
      Microsoft has gotten away with the browser bundling because it was a first offence.


      I've always wondered though, if Microsoft didnt include IE with Windows, then how would I be able to download Firefox?
      --
      "In the game of life, someone always has to lose. To me, if life were fair, that someone would always be Oklahoma." -DKR
    25. Re:Don't worry! by Ragingguppy · · Score: 1

      Hmmm... I think Microsoft should do this. Mcafee and Norton both suck. I speak from experience. The virus's I see on a daily basis easily get passed norton and mcafee. So I have no problem with microsoft publishing their own antivirus and anti spyware software. However microsofts current version of anti spyware software on their sight is a bit of a joke. And the upgrades that are built into IE end up masking the problem rather then fixing it.

      Take for instance the new popup blocker in service pack 2. With this a user calls up thier ISP and they are asked hey are you getting popups on your computer. The customer says no because they have a popup blocker blocking them. So then the Tech has to waste time proving the functionality of a working service instead of pointing them to one of the packages that can save the customer time.

    26. Re:Don't worry! by Anonymous Coward · · Score: 0

      Your ISP would provide you a disk with a free browser or give you an option to buy one.

    27. Re:Don't worry! by Anonymous Coward · · Score: 0

      Bill? Is that you?

    28. Re:Don't worry! by fireman+sam · · Score: 1

      The biggest security hole in Windows that allows malware and spyware to run is between the chair and the keyboard, commonly refered to an ID-10-T. BTW, the malware / spyware companies are already developing for Vista.

      --
      it is only after a long journey that you know the strength of the horse.
    29. Re:Don't worry! by stony3k · · Score: 1

      Ever heard of concepts like 'ftp'?

      --
      Freedom is not worth having if it does not include the freedom to make mistakes. - Mahatma Gandhi
    30. Re:Don't worry! by toddestan · · Score: 2, Informative

      I've always wondered though, if Microsoft didnt include IE with Windows, then how would I be able to download Firefox?

      c:\>ftp ftp.mozilla.org

    31. Re:Don't worry! by Anonymous Coward · · Score: 0

      Oh, you "have word," do you? Care to back that up with...oh, I don't know...facts? Because other than that you might as well be flapping your asshole instead of your lips, that'd be a shorter route for the bullshit.

    32. Re:Don't worry! by afaik_ianal · · Score: 1

      Should MS be allowed to bundle ftp with windows though?

      Yeah, yeah... -1, Troll.

    33. Re:Don't worry! by RogerWilco · · Score: 1

      Anybody remember Stacker ?

      They did win the case, but went out of business long bfore that.

      --
      RogerWilco the Adventurous Janitor
    34. Re:Don't worry! by Phroggy · · Score: 1

      Microsoft's monopoly is so entrenched in Joe Average's mind that he doesn't blame Microsoft for Windows' shortcomings; he simply assumes that the Blue Screen Of Death is part of the nature of technology. Therefore, when choosing an antivirus package, he won't distrust Microsoft for opening security holes that must now be closed; he'll think to himself "Microsoft knows Windows better than anyone, because they wrote it; fighting viruses requires that you know the operating system more intimately than the virus writers, so Microsoft is clearly the best choice. If I buy an antivirus package from some other company, who knows if it will really work?"

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    35. Re:Don't worry! by petermgreen · · Score: 1

      Not sure where you are going with the anti-virus, since Microsoft has never released one. But when they do, I'm pretty confident it'll steal the market share too.

      umm msav and mwav?

      they seemed to give up on them before the release of win95 though. dunno why

      --
      note: i'm known as plugwash most places but i screwd up registering that here somehow in the past and now can't register
    36. Re:Don't worry! by PhotoGuy · · Score: 1
      Microsoft has gotten away with the browser bundling because it was a first offence.

      Not really. There has been one thing after another, which used to be third party, which is not bundled with Microsoft's OS, driving niche after niche out of business. There was a day when TCP/IP stacks weren't provided by the OS, and there was thriving business in third parties providing these.

      Now it might seem "obvious" that a TCP/IP stack should be part of the OS, but at one point, it wasn't. Same with browsers. And now with Anti-virus. Microsoft will continue to leverage their monopoly, and continue to expand their dominance, one market at a time.

      --
      Love many, trust a few, do harm to none.
  2. What? by Anonymous Coward · · Score: 0, Redundant

    If Microsoft did its job correctly they wouldn't need anti-virus and anti-trojans protection in the first place...

  3. They need not worry by Anonymous Coward · · Score: 4, Funny

    If Microsoft stays true to form, their security tools will be full of security holes. They might even spawn a second tier industry similar to the anti-virus/worm/etc industry.

    1. Re:They need not worry by tktk · · Score: 2, Funny
      I think you've just described a user's worse nightmare.

      An OS with security holes protected by a security tool that has security holes. So malware writers will attack the security holes of the security tool to attack the security holes in the OS.

      You'll have to download updates to close the security holes in the security tool used to attack the security holes in the OS. Then you'll have to download updates for the security tool to close the security holes in the OS.

      Ow...I think I brained my hurt.

    2. Re:They need not worry by pilgrim23 · · Score: 1

      Since Microsoft created the problem, would they not be in the best position to fix it? Oh these holes in the opsys are there by ACCIDENT?? Oops! My bad!

      --
      - Minutus cantorum, minutus balorum, minutus carborata descendum pantorum.
    3. Re:They need not worry by noewun · · Score: 1
      It's obvious: MS will then release a security tool which patches the holes in the security tool so that you can download the update to patch the security hole in the OS. Once the OS is updated, you can download the patch for the Security Tool Security Tool Security Hole which will allow you to securely patch the security holes in the OS.

      Briefly:

      1) Release OS

      2) Find security hole

      3) Release Security Tool

      4) Find security hole

      5) Release Security tool patch

      6) Infinite Recursion

      7) Profit!

      --
      I am a believer of momentum and curves.
    4. Re:They need not worry by Anonymous Coward · · Score: 0

      " Since Microsoft created the problem, would they not be in the best position to fix it? "

      Yes they should!!! Which is what leaves many wondering why they don't fix it instead of trying to sell another product/service to cover off the deficiencies in the first one they sold you.

    5. Re:They need not worry by Ucklak · · Score: 1

      profit!?!?!

      --
      if you steal from one source, that is plagiarism, if you steal from many, well, that's just research.
    6. Re:They need not worry by Anonymous Coward · · Score: 0

      Consumer fraud.

    7. Re:They need not worry by billcopc · · Score: 1

      This isn't even funny anymore. I actually recommend most of my dumber users to run two anti-virus suites, because modern viruses will purposely disable or sneak past one or the other. The redundancy makes it that much closer to bulletproof.

      I'm talking some really dumb lusers here.. the kind who take investment advice from their schizophrenic neighbor

      --
      -Billco, Fnarg.com
    8. Re:They need not worry by Phroggy · · Score: 1

      Microsoft will just delete the competition...

      --
      $x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
      $x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;
    9. Re:They need not worry by RMH101 · · Score: 1
      This isn't even funny anymore. I actually recommend most of my dumber users to run two anti-virus suites, because modern viruses will purposely disable or sneak past one or the other. The redundancy makes it that much closer to bulletproof.

      This is just plain dumb if you're talking about background AV scanning (although it's a good idea if you're talking standalone scanners). AV works by hooking into the "kernel" if you can call it that of Windows, and two competing products running at the same time will be a) a monster resource hog as they both work around each other, and b) will flag a load of false positives, as the lowlevel operation of an AV program is likely to look like a rootkit or similar to the other AV.
    10. Re:They need not worry by billcopc · · Score: 1

      You obviously didn't get the memo.. rootkits are called rootkits because they fool the system into believing there is no rootkit. It's like a jedi mind trick on your PC. Virus scanners can't find rootkits because even the OS doesn't know they're there, they sneak in at a lower level and cover their tracks.

      In any event, running two virus scanners doesn't hog THAT many resources (unless one of those scanners is named Norton). The data gets read once by the first scanner, then the second one picks it up in the disk cache. There is a slightly increased CPU load but the trick is to configure the first scanner to be very aggressive, and the second one to be lazier (only scan executables, restrict to the C: drive etc). The main goal is to block rootkits at their entry point, and trap any clever ones that are designed to sneak past one of the main scanners.

      --
      -Billco, Fnarg.com
  4. Write better malware by willardj · · Score: 0, Flamebait

    These vendors are just going to have to start writing their own malware that only their software can detect and fix.

    1. Re:Write better malware by firl · · Score: 0, Flamebait

      Going to have to START writing malware? We all know that 90% of the annoying viruses that don't do damage are created via norton/symantec etc etc.... cmmon seriously you think people write viruses for any other purpose?

    2. Re:Write better malware by Anonymous Coward · · Score: 0

      90% is way off. It's closer to 5%.

    3. Re:Write better malware by BSDFreak · · Score: 4, Funny

      You mean they don't already do that?

  5. There will still be a market by kimvette · · Score: 3, Interesting

    if history serves as an indicator of future performance. I'm sure that Microsoft will stick to the first Tuesday of every month (or whenever it is) to release signature updates, security patches, etc., which will give third-party vendors the upper hand - or worst case should Microsoft totally blow it, potentially drive up the market share for OS/X and Linux migrations.

    --
    The Christian Right is Neither (Christian nor right). See: Matthew 23, Matthew 25, Ezekiel 16:48-50
    1. Re:There will still be a market by Anonymous Coward · · Score: 0

      actually for their current Windows Defender beta 2 they release updates farily often, not just on tuesdays.

    2. Re:There will still be a market by Overly+Critical+Guy · · Score: 1

      What's OS/X? I've never heard of this. I know of OS X, but not OS/X.

      --
      "Sufferin' succotash."
    3. Re:There will still be a market by NMerriam · · Score: 1

      potentially drive up the market share for OS/X and Linux migrations.

      Wow, I loved OS/2, I can't wait to see what IBM has accomplished in the 8 versions since! :P

      --
      Recursive: Adj. See Recursive.
    4. Re:There will still be a market by Bios_Hakr · · Score: 1

      I think the third parties will rely on plain stupidity. I can't tell you the number of times I have services a computer with the WinXP firewall, Norton Firewall, and Mcaafe Firewall all installed and running. Not to mention multiple antivirus programs running.

      People are stupid. Even if the fromt of the WinVis box *screams* anti-virus included, people will still be lured into grabbing Nortom Internet Security Suite for $99.95 as well. They just can't help it.

      --
      I'd rather you do it wrong, than for me to have to do it at all.
    5. Re:There will still be a market by westlake · · Score: 1
      I'm sure that Microsoft will stick to the first Tuesday of every month (or whenever it is) to release signature updates, security patches, etc., which will give third-party vendors the upper hand.

      Microsoft's corporate customers like a fixed release schedule. Updates from third-party vendors like Symantec have not been without problems lately...

    6. Re:There will still be a market by racermd · · Score: 1

      Yes, there will still be a market, but not for the reasons I've seen anyone mention.

      Microsoft is a single entity. Large as it is, and as many people as it employs, it's still a single entity that acts as such. Everyone under the Microsoft umbrella will be addressing the malware (and I include such things as viruses, spyware, installware, etc. under that term) from a single point of view. That's inherently dangerous, no matter how much money, people, effort, or any other resource they want to throw at the problem. It's not a matter of how much they can throw at it because there will always be something they didn't predict would be a problem or just got by because of limited focus on the approach.

      Good security measures come from multiple points of view, much like threats can attack from multiple vectors. Microsoft, as a single entity, is not going to be able to 'fix' the malware problem all on it's own. It would be foolish to think they can, even assuming the best of intentions.

      Ultimately, the best security is going to be prevention, and Microsoft is at least making an effort to give some basic tools to end-users.

      The one thing that has me worried is that the tools Microsoft is providing with the OS will be integrated into the OS itself. That approach is short-sighted in that it very well might be the tool *itself* that has a vulnerability. If it's so integrated with the OS, it could present problems with other future threats that take advantage of that integration.

      --
      My sources are unreliable, but their information is fascinating. -- Ashleigh Brilliant
    7. Re:There will still be a market by Korgan · · Score: 1

      Whats wrong with multiple AV software packages installed?

      I can understand your point with regards to multiple software based firewalls, thats redundant. ;-) But multiple AV software is a good idea, and one that I subscribe to on my only Windows machine.

      Having said that, the 2 I use are AVG and ClamWin. Not exactly bloated in the same way Symantec Norton Internet Security is.

      There is no guarantee that a single AV package is going to get all viruses. Just the same that something like Ad-Aware isn't going to get all Malware on its own. So it often gets combined with something like Spybot S&D. In my opinion, it is far better to hedge your bets.

      On the flipside, a software firewall is better than nothing, but I personally don't rely on them. Multiple firewalls are pointless and more likely to cause problems that provide a functioning service. So I understand your point in that regard.

      Far better to get a machine that is specifically set up for the purpose of providing firewall services and only firewall services. Or, if people must use Windows, get the Windows version of Checkpoint FW-1 instead of Norton Internet Security and do things properly ;-) But I'd still prefer to see it on something like a dedicated Nokia IPSO box thats been properly hardened.

  6. Won't the need always exist? by Tominva1045 · · Score: 3, Interesting



    As long as the OS permits users to turn down or turn off security measures- experienced users in order to do something they deem useful and noobs for just not knowing any better- followed by forgetting to turn them back on/up and then surfing to some-malicious-site.com or opening some-malicious-email then the liklihood of an unwanted installl/download > 0 yes?

    Sounds like we will always need utilities to help out.

    As technology evolves, so will the malware.

    Compare this topic to that of graphics- in the beginning there was the .BMP. And Microsoft gave us the Paint program. But images evolved into other formats and movies. And that necessitated all kinds of cool graphics software-- needs not even Microsoft itself could fully imagine or fulfill.

    There will always be a market for some next-big-thing.. :-)

    --
    Cogito Ergo Sum
  7. Jeez... by Geldon · · Score: 5, Insightful

    First M$ creates an entire industry focused around fixing holes in their OS. Now they are threatening to fix their own holes and that industry is mad at them?

    It seems to me this is like horses being mad at cars for making them obsolete.

    However, I am yet to be convinced that Vista will not require third party anti-malware support.

    1. Re:Jeez... by 99BottlesOfBeerInMyF · · Score: 2, Insightful

      First M$ creates an entire industry focused around fixing holes in their OS. Now they are threatening to fix their own holes and that industry is mad at them? It seems to me this is like horses being mad at cars for making them obsolete.

      No, they created a market for mitigating the effects of the holes in their OS. Now they are not fixing the holes, but entering the market for mitigating the effects of those holes by illegally leveraging their existing monopoly. Let me be clear on this. Bundled or not there is no legal way for MS to enter the "Windows hole mitigation" market. They can fix their OS so it does not have holes, but they can't illegally enter a market by bundling with their monopoly and they can't enter the market separately, because then they are leveraging the holes they have left in the monopoly to double-dip on customers. Both are illegal.

    2. Re:Jeez... by RightSaidFred99 · · Score: 0

      This is insightful? "It's illegal!". Bullshit. A web browser is far more afield for them than OS stability/security tools, and they ended up having no legal issues due to IE - it's still in the OS. You're simply retarded, there will be and can be no legal challenge to this, and if anyone brings one they will lose, badly. And you seem to forget monopoly laws (which are ridiculous when applied to intellectual property, but thats beside the point) are intended to protect consumers, not businesses. You're going to have an uphill battle convincing anyone that this hurts consumers now, or in the future.

    3. Re:Jeez... by EraserMouseMan · · Score: 1

      Darned if you dont. Darned if you do.

      I think MS realized many years ago that they are the official definition of this phrase.

    4. Re:Jeez... by Anonymous Coward · · Score: 0

      Trademark laws protect consumers. This is not a trademark issue. The issue is the fact that MS could bundle their anti-everything tools into the OS. Other companies that sell those goods would suddenly find themselves with sharply decreasing sales.

      However, MS could sell those tools at a competitive price separately. The tools could essentially exist with the OS and lie dormant until the consumer pays to "unlock" them. That "could" happen.

      MS would only be considered a monopoly if they crushed everyone else out of the market by bundling them for free and then started charging whatever price they wanted after the coast is clear. This is basically what they like to do.

    5. Re:Jeez... by PFI_Optix · · Score: 1

      They can fix their OS so it does not have holes, but they can't illegally enter a market by bundling with their monopoly and they can't enter the market separately, because then they are leveraging the holes they have left in the monopoly to double-dip on customers. Both are illegal.

      MS could argue that with Windows Defender they are creating a proactive way to deal with undiscovered holes. No developer is psychic; they can't see every problem up front. Example: http://www.debian.org/security/2006/ Oh no Debian has vulnerabilities!

      MS has learned that there is no one answer to security holes. They released Firewall with SP2 to take care of a wide number of security threats rather than wait for every hole to be found and patched. There are still plenty of software firewall products on the market that are better than WFW for any number of reasons. That's what will keep the market open: WD will work, but others will work better.

      No OS is free of holes. Windows controls market share, so holes are more likely to be exploited. They also are trying to make a simple, easy-to-use OS, which tends to be more vulnerable. My Linux box is a lot more secure than my Windows box (or so I'm told, neither has had an intrusion since being set up), but to gain that security I have to sacrifice things like the ability to install a software package in one step.

      Hell, I'm four levels deep in dependency hell trying to get something to compile and I've got at least one more package to download tonight in hopes that it'll work. That never happens with Windows; at worst I've had to installed Java or GTK so that something ported from Linux would work.

      --
      120 characters for a sig? That's bloody useless.
    6. Re:Jeez... by Overly+Critical+Guy · · Score: 1

      Now they are threatening to fix their own holes and that industry is mad at them?

      How do you equate providing antivirus/antispyware with fixing the holes that caused the need for antivirus/antispyware in the first place? Providing antispyware isn't fixing the holes; it's covering them up with another layer of software.

      --
      "Sufferin' succotash."
    7. Re:Jeez... by Overly+Critical+Guy · · Score: 1

      But they're not fixing the holes. If they fixed the holes, there wouldn't BE a need for antispyware software.

      What they're offering is another layer of software to cover up the holes, in a market where there are already people who do that.

      --
      "Sufferin' succotash."
    8. Re:Jeez... by killjoe · · Score: 1

      Doesn't this also incentivise (god I hate that word) MS to purposly break their OS?

      --
      evil is as evil does
    9. Re:Jeez... by 99BottlesOfBeerInMyF · · Score: 1

      MS could argue that with Windows Defender they are creating a proactive way to deal with undiscovered holes.

      Sure they can. Of course it has nothing to do with the way the law regards monopolies. They could start selling "OS covers" that are hard cases to protect your media upon which your OS is stored from breaking and they would be guilty if they bundled it with Windows. The reason for this is that monopolies are defined by markets, not by products. There is a market for anti-spyware. If MS enters that market by bundling anti-spyware with windows then they are breaking the law. If a single car manufacturer were left standing and had a monopoly they could claim an imitation of "the club" was a proactive way to augment their cheap locks. The courts don't care. All they see is that there is a market for "the club" and a monopoly is moving in by using the illegal tactic of bundling.

    10. Re:Jeez... by Red+Alastor · · Score: 1
      However, MS could sell those tools at a competitive price separately. The tools could essentially exist with the OS and lie dormant until the consumer pays to "unlock" them. That "could" happen. MS would only be considered a monopoly if they crushed everyone else out of the market by bundling them for free and then started charging whatever price they wanted after the coast is clear. This is basically what they like to do.
      It should be illegal either way. If they sell an anti-whatever, they get a conflict of interest : Should we put this fix in the antivirus or in the OS...
      --
      Slashdot anagrams to "Sad Sloth"
    11. Re:Jeez... by 99BottlesOfBeerInMyF · · Score: 1

      A web browser is far more afield for them than OS stability/security tools, and they ended up having no legal issues due to IE - it's still in the OS.

      First, they were convicted in three jurisdictions for bundling IE. Second, the product does not matter, just the market. MS had a much better case with IE because the market was very indirect. Everyone was giving the product away and using indirect advertising to make money. With spyware there is a direct, healthy, competitive market. People buy anti-spyware from a dozen companies. That is all the courts care about because that is how monopolies are defined, by markets.

      You're simply retarded, there will be and can be no legal challenge to this, and if anyone brings one they will lose, badly.

      You are ignorant. You obviously have not bothered to read the Sherman Act.

      And you seem to forget monopoly laws (which are ridiculous when applied to intellectual property, but thats beside the point) are intended to protect consumers, not businesses. You're going to have an uphill battle convincing anyone that this hurts consumers now, or in the future.

      Monopoly laws don't care about intellectual property, they care only about markets. They are intended to protect free markets, under the belief that free markets benefit the consumer. When customers can choose the best of several products, for a given price; companies strive to make better products at lower prices in order to compete with one another and make money. This benefits consumers. When one company who has a monopoly in one market enters a second market by bundling two products (as defined by markets into which they are sold) and combining the prices of those products (you don't think the MS coders who wrote this are working for free do you?) they subvert the free market. Why would someone buy a second anti-virus suite when they were forced to pay for one included "free" with Windows? Some will, but only people who need a better product so much that they are willing to pay twice; once when they buy Windows and again when they buy the competitor. In this way, most people settle for whatever is bundled and consumers don't get the best product and certainly not at the best price. All of this should have been covered in Econ 101. Please educate yourself before spouting off ignorant rants in the future.

    12. Re:Jeez... by drsmithy · · Score: 1
      If they fixed the holes, there wouldn't BE a need for antispyware software.

      Yes, there would.

    13. Re:Jeez... by mysidia · · Score: 1

      Except in this case, they get their warning well in advance. At this rate Vista won't be out until 2008 or so, and the system requirements will require such advanced equipment, that many users of windows will have no choice but to stick with XP until they eventually decide to buy new systems.

      Many, many of the Windows installations actually in use will be Windows 98, 2K, or XP for the forseeable future, even after the release of Vista.

      And the AV makers will probably have little difficulty continuing to sell updates to their users.

      You can also bet the bad guys/script kiddies/etc will target Vista -- if the security tools have been made part of the OS and setup in a certain way by default, the default configuration will of course be what the bad guys attack. Presumably if the attack manages to break the security tools and patching mechanism, it's back to square 1, unfortunately.

  8. Bundling? by TheBogie · · Score: 0
    Could adding anti-virus type software to the OS be considered bundling?

    Isn't MS in big trouble with the EU now for this same type of thing?

  9. be secure or BE secure? by geoff+lane · · Score: 3, Insightful

    If Vista is as secure as we are being told by MS, why would it need anti-virus code from any source?

    1. Re:be secure or BE secure? by LiquidCoooled · · Score: 2, Insightful

      Because no matter how good the code is there is always a way to exploit the weakest link.
      That link is usually situated between the keyboard and the chair.

      Having a system able to run generic code means no matter how many warnings you give, malicious code will still exist.

      --
      liqbase :: faster than paper
    2. Re:be secure or BE secure? by Mancat · · Score: 1

      Because even the tightest user-level security can still let a virus, i.e. any malicious application, destroy the user's data. This even applies to - gasp - Unix. Maybe Vista will provide security measures that successfully protect system files from being infected, but I have no doubt that viruses will continue to ravage user's systems in other ways.

      --
      hello dear sirs my name is jamesh i are india (bihar) can u guide me install red had linux 9?
    3. Re:be secure or BE secure? by diegocgteleline.es · · Score: 1

      Because there're "virus" that are just a executable asking "CLICK ME!" and there's no technology on earth which can stop users being stupid?

      Just because most of linux and mac os x users are not stupid doesn't mean everybody is smart and antivirus are not needed.

    4. Re:be secure or BE secure? by morcheeba · · Score: 1

      That's why I'm migrating my whole office to the xbox360 -- I'm just waiting for Word360 and Outlook360 to be released. Without virii, trojans, and phisihing to worry about, productivity should soar!

    5. Re:be secure or BE secure? by Korgan · · Score: 1

      Already a product from MS for you then. :-) Office Live ;-) Companion to Xbox^H^H^H^H errr Windows Live.

    6. Re:be secure or BE secure? by dantheman82 · · Score: 1

      Stop trying to play games with us...

      --
      This sig donated to Pater. Long live /.
  10. Oh please! by AnonymousPrick · · Score: 1

    Everyone knows that you have to run a couple of different programs to get most of the spyware and adware off your machines. And those who don't know won't be using MS's anyway.

    --
    Saturday is April 1. Slashdot will be shut down. Sorry for the inconvenience.
    1. Re:Oh please! by quazimtoto · · Score: 1

      Are you kidding me, it's the people that don't know you need 2+ anti-spyware toolkits installed that will be using the MS software... these are the same people that crowned IE king of the browser wars!

    2. Re:Oh please! by blueflash2o · · Score: 1

      thanks for clearing that up for me do you know of 2+ anti-spyware toolkits for linux

  11. Windows Defender by CaptainPhoton · · Score: 1

    Is the Vista functionality different from Windows Defender? I'm curious if the Microsoft software is already taking market share from the other players...

  12. Check who's buying anti-malware software. by rob_squared · · Score: 4, Insightful

    I'm guessing the biggest buyers of antivirus, firewall, and spyware detecting software will be knowledgeable users and corporations. Even if you're talking about AOL users with their default installs, AOL still had to make a deal with MacAfee.

    My guess is that most corporations and users will turn off the bundled anti-whatever, and use what they trust. After all, should you trust the company that created the problem after they sat for years without doing much, to solve the problem?

    --
    I don't get it.
    1. Re:Check who's buying anti-malware software. by MacDork · · Score: 1
      After all, should you trust the company that created the problem after they sat for years without doing much, to solve the problem?

      OTOH, should you trust companies that worked with Sony to make a threat to corporate networks invisible?

    2. Re:Check who's buying anti-malware software. by thunderlove · · Score: 1

      Disagreed. My guess is that most corporations will drop MacAfee et al, and stick with what's bundled -- after all, they DO trust Microsoft -- at least enough to still be running Windows. Besides, its 'free', and 'pre-installed'.

    3. Re:Check who's buying anti-malware software. by Anonymous Coward · · Score: 0

      Not necessarily. Enterprises stick with Windows mostly because it's the only option available that doesn't require a complete hardware overhaul (Mac OS), retraining all your employees (Linux, Mac OS), and is 100% compatible with MS Office (Linux).

      The last one is the big issue, and it's something of a vicious cycle - companies run Windows and Office because that's what all their suppliers and clients use, and short of a mass exodus, you won't get much movement there. Depending on how you look at it, it started with the adoption of IBM PCs as the main choice of businesses way back when and now we're stuck with it.

      Windows/MS reliance aside, I think that the big companies like Symantec and McAfee won't really lose much ground at least in the corporate world, unless the built in Windows feature is really spectacular. The big selling point of something like Norton AV for a corporate environment is stuff like being able to push out new updates and definitions for an entire office at once, instead of individually downloading and configuring it. They also integrate fairly highly with Outlook/Exchange server. The important features for corporate users aren't the actual virus/spyware scanning bits, its the administration features.

  13. I understand M$'s desire to squash these guys by xxxJonBoyxxx · · Score: 2, Funny

    I understand M$'s desire to squash these guys. Every time some server custodian buys another Symantec/Trend/McAfee license, the thought in the back of that custodian's head has to be "I wonder how much less of Symantec/Trend/McAfee's shit I would have to deal with if we didn't have so many M$ platforms running around."

  14. It'll be the same story as always by doctor_nation · · Score: 4, Insightful

    Since everyone will be running MS's anti-spyware program, the spyware folks will concentrate on defeating it, just like virus writers concentrate on beating Windows "security". So there will still be a market for other vendors, since they would hopefully be better at stopping spyware than MS' default option. And since there's lots of them, it's harder to defeat them all. Even now, it's pretty well accepted that you need at least two anti-spyware programs to catch everything.

    1. Re:It'll be the same story as always by kbielefe · · Score: 1
      it's pretty well accepted that you need at least two anti-spyware programs to catch everything.

      Is that really true? Do you need to pay for subscriptions to keep them both up to date? If not, how do the companies make money? If they don't make money, why do they care if Microsoft steps up to take care of the problem?

      Forgive my ignorance, but I only really used Windows for about a year before throwing in the towel.

      --
      This space intentionally left blank.
    2. Re:It'll be the same story as always by doctor_nation · · Score: 1

      Well, you can certainly catch MOST spyware with just a single program. Ad-Aware has a free version that works pretty well. But the last study I saw showed that none of the programs, paid or free, was able to clean a machine of all kinds of spyware. So if you want to be completely clean, you need at least a couple different programs. Some companies, like McAfee and Norton, include the anti-spyware with their virus-scanners (I believe), so it's "added value" that they can charge you more for.

    3. Re:It'll be the same story as always by SpiritGod21 · · Score: 1

      Except the anti-spyware bundled with Symantec and McAfee is largely worthless. I don't know how many computers I've had to fix that had one of those programs installed where part of the solution was uninstalling Norton/McAfee and putting on Lavasoft's Ad-Aware, Spybot S&D, and AVG. Generally, when I run Ad-Aware, Spybot doesn't catch anything else... but sometimes it does, and the Immunization feature is nice.

  15. Microsoft Antispyware by RyanCowardin · · Score: 2, Interesting

    I can't help but wonder why Microsoft bothered to buy Giant Company awhile back for their antispyware product. Guess it explains why they've put zero effort into improving it since they bought it though.

  16. What about AVG Free? by digitaldc · · Score: 3, Insightful

    leading vendors such as Symantec, McAfee and Trend Micro,

    AVG Free works quite well and has removed Trojans that Symantec couldn't.

    --
    He who knows best knows how little he knows. - Thomas Jefferson
    1. Re:What about AVG Free? by Anonymous Coward · · Score: 0

      What's the deal with ClamAV? I know they're OSS and all that wonderful stuff, but has anyone here used it extensively enough to share valid opinions? I mean I know my Linux box won't get hit with the typical kinds of malware but I might consider adding some virus scanning capabilities to it so I don't unwillingly forward/pass malware on to anyone else.

      I've heard it used server-side along with stuff like spam-assassin but anything on the user level?

    2. Re:What about AVG Free? by Korgan · · Score: 1

      ClamAV is just a scanner. A good scanner that I've found is often updated before many others, but its just a scanner.

      Most common use for it is to scan email through an MTA or web traffic through Squid. I've also used it to run scans on network mounts via a cronjob in the middle of the night.

      The Windows port of it is quite good. But again, its just a scanner and it doesn't offer Live/resident scanning for files opened/closed in the way most other AV packages do. Its only manual scanning. Where it comes in to its own on Windows is that there is a Firefox extension for the Windows port of ClamAV that will scan all downloaded files automatically. I'm not aware of AVG or others easily doing that with Firefox without being set up as a proxy.

      Results with ClamAV have been pretty good. My experience has been that its at least as good as something like AVG as far as detection goes. At one of my client sites, mail goes through ClamAV and then f-prot. f-prot has never picked up anything, so I can only assume that ClamAV is performing at least as well as f-prot. For most of my client sites, I (and my clients) trust it enough to use ClamAV on its own.

      None of my clients run Windows on their servers (all small companies with very simple infrastructure needs) so I can't personally compare it with something like Symantec or McAfee (or other) products when it comes to email filtering at the server.

      As long as people remember ClamAV is just a scanner and will only scan what you explicitly tell it to, when you tell it to, I see no reason not to trust it as you might trust any other piece of AV software available.

      I think what makes ClamAV stand out is that its very easy to integrate as a scanning solution for most software. Very simple to add to Squid filters, very simple to add to most MTAs such as Postfix, Sendmail and Qmail. If you're familiar with scripting, not difficult to add to anything thats scriptable.

      Does that answer your question? ;-)

    3. Re:What about AVG Free? by howlingmadhowie · · Score: 1

      avg free is free software. the general opinion is therefore that it can't be as good as software which you pay money for and shouldn't be taken seriously.

      if i were more cynical, i would maybe consider the option that magazines often get certain presents from a company if they decide to review the company's software; the value of the presents being proportional to the result of the review.

  17. It's not Microsoft's fault for once by Rosco+P.+Coltrane · · Score: 5, Interesting

    Anti-virus companies, ironically, are very much like a parasite that only lives on a specific host. When the host disappears (pre-Vista versions of Windows), the parasite dies. Either they get lucky and they find a new host in the form of Vista with security problems, or they diversify in a hurry.

    For once, you can't blame Microsoft for ruining an industry, and I can't say I'll feel sad if McAfee or Symantec dies...

    --
    "A door is what a dog is perpetually on the wrong side of" - Ogden Nash
    1. Re:It's not Microsoft's fault for once by eclectro · · Score: 1

      Hate to throw water on your hopes of a mass industry die-off, but how do you know that Vista is going to be any more secure than anything else they have ever produced?? Do you know something about Microsofts QA that we don't??

      --
      Take the cheese to sickbay, the doctor should see it as soon as possible - B'Elanna Torres, "Learning Curve"
    2. Re:It's not Microsoft's fault for once by Anonymous Coward · · Score: 1, Interesting
      but how do you know that Vista is going to be any more secure than anything else they have ever produced??

      He doesn't. That's why he never made that claim.

      Either they get lucky and they find a new host in the form of Vista with security problems, or they diversify in a hurry.
    3. Re:It's not Microsoft's fault for once by tsm_sf · · Score: 1

      It's more of a mutualistic relationship than parasitic, although I'm sure MS views it as a commensal one.

      --
      Literalism isn't a form of humor, it's you being irritating.
    4. Re:It's not Microsoft's fault for once by molarmass192 · · Score: 1

      For once, you can't blame Microsoft for ruining an industry, and I can't say I'll feel sad if McAfee or Symantec dies...

      I prefer to think of it as if you get into a cage with an 800 pound (and growing) gorilla and a fully grown banana tree, plant your own banana tree, and eat only bananas off your tree, *eventually* that gorilla is going hit 900 punds and decide it's time to rip you into quivering shreds so it can eat your bananas too. It's the price you pay ... and I won't shed a single tear either, I'll just add McAfee and Symantec to Corel, Lotus, Netscape and all the other MS roadkill.

      --

      Good people do not need laws to tell them to act responsibly, while bad people will find a way around the laws-Plato
  18. Long way away by VonSkippy · · Score: 1

    Even if all the doom and gloom is true - it's along time off. It's 2006, yet most corporations still have a handful (or more) of W2Kpro workstations. So even if Vista ships later this year, it's not like the anti-malware businesses will go out of business the week after that. There's at least a window of 3-5 years before their market dries up, and that's plenty of time for the malware writers to find a work around to MS or for the anti-malware writers to change their business model.

    1. Re:Long way away by Tony+Hoyle · · Score: 2, Insightful

      There's still a significant amount of NT4 out there too, but it's slowly being phased out (still get the occasional person who's IT people haven't certified SP6a yet and they're on SP3! Luckily this is getting rarer... IT moves slow in large companies).

      W2k is still in the heart of IT running the domain controllers in many (possibly most) companies... W2k3 is gaining ground but is still not in the majority even 3 years after its release (based on our own marketing surveys, which cover a lot of companies in europe).

      Vista isn't even in the planning stages yet. Not heard anyone even mention it or ask for support.

      New OSs take time to gain ground in business. We had our first enquiry about Solaris 10 2 weeks ago.. and that was relased, what, about a year ago? That's against several thousand Solaris 9 installs.

    2. Re:Long way away by misfit815 · · Score: 1

      "heart of IT"? Heck, I still run Win2k at home. Why? Because...

      - Didn't feel like paying for an XP license.
      - Not as much DRM crap as what's found in XP (that whole 'activation' bs).
      - Runs *my* preferred games, unlike Linux, BSD, etc. (sorry, guys).
      - The whole NT/2K/XP line is orders of magnitude better than 95/98/ME.
      - NT's just too archaic.

      And all those reasons leave me with Win2K. It's definitely not a good choice, but it's the best choice, for me anyway (which is really rather unfortunate).

      Downside? For all of its negatives, it's sure nice having Windows Media Player 10 on my work box. It can play just about anything I want it to, it rips nicely (as long as you remember to switch from the default DRM'd file type to mp3), and the library/ratings/playlist features are fairly well done (but not great yet). Everything else I've found either has just as much (or more) DRM (iTunes), a sucky UI (*all* OEM players), doen't play something obvious like DVD's (WinAMP), or doesn't have all the pretty whiz-bang features I just mentioned (Media Player Classic).

      J

      --
      Jesus told him, "I am the way, the truth, and the life. No one can come to the Father except through me. - John 14:6 NLT
  19. Good Riddance by SnailNobra · · Score: 0

    All those products do is bog down computers. Give me a hardened version of Windows that is more resistant to attacks and doesn't require me to run heavy applications to keep my computer clean. Give me that and I'll be happy. Good Riddance to McAfee and Symantec.

    --
    Nihilism means nothing to the dancing peasants
    1. Re:Good Riddance by Jason69 · · Score: 2, Informative

      Here you are: Hardened Windows

    2. Re:Good Riddance by SnailNobra · · Score: 0

      Funny. Linux sometimes is just not an option. Currently in my posession are one Debian server, one Ubuntu laptop and one Windows Desktop. If there were applications that I needed available on a linux distribution then I would switch the desktop machine to Linux. Until that time, I will continue to run Windows on the desktop. For that reason, I would like to see a hardened Windows.

      As an aside, I have never had a security issue with any windows computer I have ever owned and maintained, this dates back to the very beginning of windows 95. The same follows through to my Linux computers. However, I cannot say the same for other Windows computers that I have had to restore. This can only be a good thing. Windows becoming more secure allows competent computer users (like those of us who prowl slashdot) to get back to doing work instead of fixing everyone else's mistakes.

      --
      Nihilism means nothing to the dancing peasants
    3. Re:Good Riddance by SnarfQuest · · Score: 1

      Give me a hardened version of Windows that is more resistant to attacks and doesn't require me to run heavy applications to keep my computer clean.

      That's not what they are offering. What they are force-feeding you is their own version of the same kind of software that attempts to clean up after the operating system lets the cruft in. This article is *NOT* about Microsoft making Windows more resistant to this sort of crap.

      --
      Who would win this election: Andrew Weiner vs Andrew Weiner's weiner.
    4. Re:Good Riddance by SnailNobra · · Score: 0
      But wouldn't it be a logical path that once this service is included into the main Windows installation it becomes a sort of built in watchdog. So you have a constantly updated and always watching application that doesn't kill the system like McAfee or Symantecs offerings that can provide zero-day protection to exploits? Then once the patch is available it is downloaded from the Windows Live Update service.

      So I have the Windows Malware Buster running on my machine and there is an issued warning for a possible exploit. That day Windows Malware Buster updates it's definitions and is now aware of the potential risk and how to remove it or prevent it from installing/infecting. The next day, slashdot.org gets infected (hypothetical of course) and the exploit is, well, exploited. The Windows Malware Buster eliminates the exploit before it has an opportunity to do any exploiting. Later in the week, an official patch is downloaded from Windows Live Update.

      I can only see this as being a good thing.

      --
      Nihilism means nothing to the dancing peasants
  20. get rid of spyware? Ha. by xx_toran_xx · · Score: 3, Insightful

    Yeah, sure, they'll get rid of spyware. Just like they got rid of spam.

    --
    Arrrrrrr
  21. Put me out of business by Charles+Dodgeson · · Score: 2, Interesting
    First M$ creates an entire industry focused around fixing holes in their OS. Now they are threatening to fix their own holes and that industry is mad at them?
    That's my feeling about it. A substantial portion of my earnings comes from coping with a problem that shouldn't exist. (I help small and medium sized businesses cope with spam.) If some development makes the spam problem go away, that will be bad for my business. I knew that when I started working in the business. And I'm not any brighter than the people who went into the anti-malware business.

    Overall, I would like to be put out of business by a real end to the spam problem.

    --
    Prime numbers are exactly what Alan Greenspan says they are -S. Minsky
    1. Re:Put me out of business by DrSkwid · · Score: 1

      I used to carry red flags in front of cars.

      Man the bottom really fell out of that business!!

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    2. Re:Put me out of business by LordSnooty · · Score: 1

      Exactly. The anti-malware guys got lucky, and found a gap in the market that needed filling. Eventually, conditions change and the circs which led to the gap in the market disappear. The anti-malware makers need to start thinking, and find another gap in the market. Don't gripe. They did it before, they can do it again.

    3. Re:Put me out of business by zcat_NZ · · Score: 1

      But it didn't happen because Ford started supplying their own flag-carrier-for-life free with every new car, did it?

      --
      455fe10422ca29c4933f95052b792ab2
    4. Re:Put me out of business by Zonnald · · Score: 1

      Sure, but they did flood the market with cheap mass produced cars which meant that they figuratively "broke the back" of the Horse market.

  22. No. by Flying+pig · · Score: 4, Interesting
    Building security into an operating system cannot be bundling, because security is an essential part of OS design (well, for proper Oses it is, anyway.)

    However, there is a more interesting issue with things like virus signatures and so on (emerging threats.) IANAL but I do wonder if, assuming that continuous updates are required to identify new forms of phishing, Trojans etc., MS might be required by the EU to open its API so that updates could be bought from different suppliers, on exactly the same basis that you can buy tires and exhausts from sources other than the car maker.

    --
    Pining for the fjords
  23. Frustrating by sinfree · · Score: 0

    It frustrates me that Microsoft wants to charge people for flaws in their own operating system. Typically bug fixes are included with an OS for free, but Microsoft wants us to pay them to keep bad stuff off of our computer, when the OS should inherently do that. *sigh*

    1. Re:Frustrating by Columcille · · Score: 1

      Where are they asking for payment? Updates to the OS are free, and at least for now Windows Defender is also free. It's possible it will be a for-sale product in the future, but I haven't heard anything indicating that.

      --
      I love my sig.
  24. Gambling that VISTA is as insecure as ... by Jerry · · Score: 1

    XP and its predecessors.

    From early reports the odds are that they are right. Now they won't have to manufacture phoney Linux bugs in their lab in a vain attempt to generate revenue from Linux users.

    --

    Running with Linux for over 20 years!

  25. I already have anti-malware from Microsoft by iminplaya · · Score: 2, Funny

    format.com

    --
    What?
    1. Re:I already have anti-malware from Microsoft by Anonymous Coward · · Score: 0

      LOL! If you actually go there, click on Richard. It takes you to malware.org. Sarah takes you to badguys.org. I always knew those three were somehow realted.... You sir desreve a +5 informative!:)

    2. Re:I already have anti-malware from Microsoft by Anonymous Coward · · Score: 0

      Format won't cure a boot sector virus, nor some rootkits. FDISK.EXE is what you want. The plus side of this nifty little program is that fdisk /mbr will get rid of a boot sector virus (like GRUB or LILO) without messing up Windows!

    3. Re:I already have anti-malware from Microsoft by jason+ward · · Score: 1

      I don't see how a picture of a sunset will help...

    4. Re:I already have anti-malware from Microsoft by iminplaya · · Score: 1

      OMG! Who'd a thunk? I guess I should've said C:\WINDOWS\system32\format.com or better yet D:\tools\oldmsdos\format.com but When I started it was A:\FORMAT.COM

      Oh well, that's what I get for growing up without an internet.

      --
      What?
    5. Re:I already have anti-malware from Microsoft by Anonymous Coward · · Score: 0

      a boot sector virus (like GRUB or LILO)

      What a stupid thing to say

  26. So... by steveo777 · · Score: 2, Interesting
    Microsoft plans on counteracting McAffee, Symantec, and Trend Micro's speed crippling services with their own? Honestly. There are MUCH better tools out there that corporations could be using. Try using a Novell firewall in front of all your Windows boxes. Then subscribe to a good blocklist so your employees can't get to sights that are likely to be infected (employees will rarely, if ever, need access to warez, porn, or blogging sites).

    The big names in anti-virus are just eating resources. Without them we wouldn't be upgrading our computers quite as often. I work on a 2000 box at work with only 256MB of RAM. It normally runs fast enough, but once there was a decision by scared execs Symantec was installed. Now I'm hitting the VRAM like a drunk hits the dollar tapps at happy hour.

    --
    This sig isn't original enough, it's time to come up with something witty...
    1. Re:So... by Tony+Hoyle · · Score: 1

      When they tried that at one place I worked I immediately switched it off - compiles were taking 5* longer which directly hit productivity. They bitched, but saw the point. You just have to explain to them that it's costing them money *now* to have that crapware on your machine, rather than the very small risk of something getting onto your machine without you knowing about it.

  27. dump windows by wardk · · Score: 0, Troll

    I would love to see ALL anti-virus vendors STOP supporting Windows.

    Let MS handle it all on their own.

    Windows users would be SCREWED ....more screwed that is

    1. Re:dump windows by Machina+Fortuno · · Score: 1

      Yeah... and in an attempt to kill Windows all those anti-virus companies would DIE!

      Windows is their bread and butter, they rely on it being unreliable

      MS has enough money to outlast all of those companies

      They would just make their own anti-virus in the mean time

      Then you have bunches of dead anti-virus companies, and MS still won! Haha!

      --
      ...
    2. Re:dump windows by colinrichardday · · Score: 1

      And what would they support? OpenBSD?

    3. Re:dump windows by wardk · · Score: 1

      they could go back to writing them?

    4. Re:dump windows by colinrichardday · · Score: 1

      Writing viruses? That's nice, but if they don't support Windows, who's going to buy their products?

  28. Hmm... by tktk · · Score: 2, Interesting
    Collectively, all other anti-malware vendors should just delay support for Vista. Let Microsoft handle all the anti-malware for a while.

    Then when Microsoft is overloaded with attacks, the vendors should return with their new versions. They'll be greeted as saviors.

  29. Not sure what the hype is here... by kainewynd2 · · Score: 1

    Microsoft's Anti-Spyware package (Windows Defender) is really a nice base for anti-spyware movements, but it will never be enough. Once you start relying on a single point for all of your defense stuff is bound to start targetting that. I mean within a week of the Windows Anti-Spyware Beta being released spyware creators were already targetting it for deletion upon "infection." I do agree that corporations like Symantec and McAfee that offer bloated and underwhelming spyware/malware removal tools are in for a big threat. However, companies like Lavasoft and programs like Spybot will continue to thrive because they offer a diversity of scanning software.

    --
    I just don't get... eh, ugh... never mind. This post wasn't worth the research I put into it.
  30. Anti-Spyware/Adware by erroneus · · Score: 0, Troll

    I am Microsoft's enemy. Can't be any more direct than that. Hate the company. Hate their products.

    But all other things asside, these anti-malware people built a business from the failings, vulnerabilities and shortcomings of Microsoft technologies. It's a moving target, technically speaking. Furthermore, if my favorite OS or any OS had a kind of "black list" of programs not allowed to run here, then I'm in favor of it. Essentially, that's what the anti-malware is.

    I wouldn't consider it to be anti-competitive for Microsoft to shore up their own OS products for a better user experience and/or better security... unless they were charging money for it, and then I consider it more along the lines of extortion. "We don't know WHAT you might be infected with if you don't buy our product."

    1. Re:Anti-Spyware/Adware by Columcille · · Score: 2, Informative

      I wouldn't consider it to be anti-competitive for Microsoft to shore up their own OS products for a better user experience and/or better security... unless they were charging money for it, and then I consider it more along the lines of extortion.

      These tools provide protection from attacks against multiple fronts. In part the protection is against malware designed to seek out and exploit holes in the underlying software. But it is also designed to protect users from their own inexperience. The strongest OS will still need protection since it still has people using it. So while I think Microsoft should provide free releases to any updates that directly deal with holes in their products, they still are in their rights to charge for a product that takes the extra step of protecting users from themselves. This is not extortion.

      --
      I love my sig.
    2. Re:Anti-Spyware/Adware by Anonymous Coward · · Score: 0

      You're Microsoft's ENEMY? WHY? If you don't like the products, then don't use them... I don't like certain kinds of music or bands in particular, but that doesn't make me their enemy.

      Oh, and I happen to like their products... but I don't consider Microsoft my friend either. I rest my case.

  31. If.... by celardore · · Score: 1

    If you were an established anti-virus, or anti-spyware company, would you honestly be worried?

    Sure Microsoft have the funds. However, Microsoft don't even have a track record as far as AV goes, and their anti-spyware offering left much to be desired as far as I read. Never used it myself.

    1. Re:If.... by Tony+Hoyle · · Score: 1

      I for one won't be crying if Norton goes bust. I've had to work around their crapware too often.

  32. Great by Mancat · · Score: 1

    I'm tired of going into offices or homes to clean up Windows machines, and finding one or two (or more) of these "Spyware Cleaners" running in the system tray simultaneously. Most of them don't do jack squat. Half of them even contain spyware.

    Good riddance. I'm really looking forward to Vista.

    --
    hello dear sirs my name is jamesh i are india (bihar) can u guide me install red had linux 9?
    1. Re:Great by BugsPray · · Score: 1

      Are you kidding?! I charge $35/hr to install and run SpyBot, Adaware, and AVG (the other option around here is the Geek Squad - I'm doing this town a service). I hit the "Scan" button and watch the money signs fly through the air while making CHA-CHING noises. The extra money helps me pay my rent and utilities. Vista had better be as easy to get through as their previous OS's or I'll be homeless!

  33. An Industry Threatened? by mabu · · Score: 1

    Microsoft has put thousands, perhaps tens-of-thousands of software companies out of business in the last two decades. As much as they do have a track record of destroying competition in various segments, somehow, I just don't see "computer security" being one of them.

  34. Threat? Well... by FridayBob · · Score: 1
    ...for firms that are focused on only one of those problem areas, analysts said, Vista and the other Microsoft security products could pose a significant threat.
    Perhaps, but experience tells me that it will probably be a long time before most businesses upgrade to Vista. Why, even after five years, there are still many that haven't yet upgraded to Windows XP.

    Actually, the worst thing that could happen to the anti-mailware vendors is if companies end up rejecting Vista and move to *nix platforms instead.
  35. Do you want security or not? by Anonymous Coward · · Score: 1, Funny

    Linux Fanboy: See how insecure Microsoft is. How could any REAL OS allow malware to be installed so easily? They should really beef up security so this doesn't happen, or stop producing Windows and let Linux take their market share. LINUX ROCKS!!!

    Microsoft: You are correct. In the next version on Windows we will be focusing more on security, and we will not allow malware to be so easily installed, and for the stuff that does get installed, we will also provide you a way to remove it and save you money from having to buy another product.

    Linux Fanboy: See!!! Microsoft is a monopoly! They are improving security of their product, and as a result these companies that produce anti-malware software will be suffering! Microsoft is crippling the software industry! This would never happen with Linux!

    1. Re:Do you want security or not? by howlingmadhowie · · Score: 1

      you know, there is such a thing as a no-win situation, which is also justifiably no-win. microsoft have manouvered themselves into a moral hole, and there is no easy way out. the one possibility, which would put the linux crowd to rest, would be if microsoft improved their operating system to make the majority of anti-spyware/virus/malware etc. software redundant. microsoft however appears unwilling or unable to do this and instead is adding another layer of protection, rather than seeing to it that the underlying software is safe.

      however, that would in no way be enough for the GNU crowd. the GNU crowd says, quite justifiably in my opinion, how can we trust software, when we don't know what it does? the windows xp operating system itself has spyware built in. is there any reason to believe that this will change for windows vista?

      in the eyes of GNU-people, and in the eyes of any foreign (i.e. non-microsoft) company or government, the usage of non-free software is a gamble.

      as someone wrote earlier, if you're microsoft, you're dammed if you do and you're dammed if you don't. and rightly so.

  36. Self replicating ... by jamesl · · Score: 1

    What exactly is a "self-replicating zero-day spyware threat?"

    1. Re:Self replicating ... by mabu · · Score: 3, Funny

      My guess is a "journalist"

    2. Re:Self replicating ... by RobertLTux · · Score: 1

      okay lets break this down A zero day: this would be the day before an exploit is publically known B self replicating: ie when it installs it tries to send copies out C spyware : tracking or other i want info on YOU software D threat : what happens when a b c happen

      --
      Any person using FTFY or editing my postings agrees to a US$50.00 charge
  37. Dissenting a bit here... by vudufixit · · Score: 1

    1. The defender product integrated into Vista is based on Giant's antispyware product, which I recognized upon learning about it as an excellent anti-spyware product. I remove a lot of spyware and adware from clients' PCs and it's been a valuable tool in my arsenal. 2. That having been said, I also recognize that no product catches every last bit of malware out there. That's why in addition to Defender, I also use Spybot, AdAware, HiJack This and occasionally Ewido. I also check the usual suspect places such as c:\windows\system32 and the various temp directories and clean those out. I really don't see how the inclusion of Defender is going to make people stop using the "multipronged" anti-malware approach.

  38. Like the Firewall by nobodynoone · · Score: 1

    If MS does this thing right and prevents gaping holes and security breaches, has reasonably fast definition updates, and sets and affordable price, there may be reason to fear on the part of the Anti-Malware vendors.


    Therefore, it logically follows that there is no reason to fear on the part of the Anti-Malware vendors.

  39. oh, cry me a river by b17bmbr · · Score: 2, Insightful

    we're supposed to feel sorry for companies that hooked their wagon to an unsecure ship? their buisness model is dependent upon MS writing bad software. well, not that that's a bad gamble, but...

    maybe it's about time MS writes more secure software. besides, given the hardware req's for vista, there'll be millions who sill still run xp/me/98 for the forseeable future.

    --
    My problem? I was perfectly gruntled, until some numbnuts came by and dissed me.
  40. Who Watches The Watchers? by mabu · · Score: 2, Interesting

    If there's an issue over whether Vista will put the big antivirus companies out of business, I don't see it as consequential. IMO, the software companies themselves will be responsible for their own demise, regardless of whether Microsoft enters the market. Programs like Norton Utilities used to be valuable, but now these once-critical utilities have morphed into bloaded virus-like software incarnations that are best not installed in the first place.

    Furthermore, both McAffee and Symantec products have been hosts to numerous flaws, security holes and vulnerabilities themselves.

    If Microsoft wanted to do it right, they could merely have Vista identify both programs as "malware" right off the bat, remove them from the system, and most users would be better off.

  41. Isn't This Monopoly Power Abuse? by john.mull · · Score: 2, Interesting

    Isn't Microsoft using its monopoly power to (Windows platform) to introduce a new product that competes with existing products? Anti-virus companies are already making products to handle security, then Microsoft includes that functionality in the OS itself.

    This is quite similar to the inclusion of Internet Explorer. And OS level disk defragmentation (remember PC Tools anyone?).

    Now if Microsoft were to include preventatives/prophylactics in the OS, that's one thing, but including AV software, even if integrated into the OS, seems to be stretching things a bit.

    Of course, this is the company that said it was cheaper to break the law and fight it in court than it was to follow the law.

    --
    Isaiah 43:19 (NCV)
    Look at the new thing I am going to do. It is already happening. Don't you see it?
  42. Hmmmm... 1 thing missed by Machina+Fortuno · · Score: 1

    Many of you keep talking about how these companies are parasites or whatever for basing themselves off of MS's errors. Well... sorta

    They didn't so much base it off of a faulty OS, but the internal paranoia of consumers. To beat them, MS will have to defeat that before the actual bugs. Not to say that it isn't warranted, but the point being... While these companies may take a big hit, they will not die off. The one thing about parasites is... they can be very adaptive. These companies will live off of people who were pleased with their software the first time around, purchasing it again. That, and contract agreements with coprorations anyways. Also... Vista will still have its own problems. I don't think people will ever trust something to self-clean, people feel good about buying a utility...

    --
    ...
  43. Assuming MS delivers vista by MECC · · Score: 1


    Remember that longhorn(now scrapped) was MS's first attempt at an OS since DOS. They hired a team from digital to produce the NT/2k/XP codebase and OS architecture, and gave that group a significant degree of insulation from the MS management structure, including billg. MS is very likely going to have to do the same thing again to deliver Vista in any decent form, or whatever it will be called by then. After all, if they scrapped longhorn, whose to say they won't have to scrap vista.

    --
    "We are all geniuses when we dream"
    - E.M. Cioran
    1. Re:Assuming MS delivers vista by blueflash2o · · Score: 1

      Didn't they just rename longhorn vista.

  44. Interesting article by Eric+Damron · · Score: 1

    Well an interesting read even if I don't agree with some of the opinions expressed:

    "Other security vendors are taking a similar approach. Steve Orenberg, president of anti-virus specialists Kaspersky Labs, in Woburn, Mass., said that for every problem Microsoft addresses with Vista and its other security products, there are likely to be new issues that will demand attention from companies such as his.

    Vista might do a good job of blocking the types of spam e-mail that people have been deluged by over the last several years, Orenberg said, but the rapid maturation of viruses and other threats will require more attention than Microsoft is capable of giving them."

    What makes Steve think that Microsoft, a company with billions of dollars in the bank, will be unable to afford to hire all the people needed to give the problem adequate attention?

    Microsoft has in the past been incapable of securing its software but that's a different topic; closely related perhaps but different.

    If I know Microsoft they smell money and they'll be bundling some sort of "protection software" in with Vista. A lite version just to get people going on their products perhaps? Once they leverage their monopoly OS to extend their business into a different area it'll be game over for companies like McAfee and other vendors selling similar services.

    --
    The race isn't always to the swift... but that's the way to bet!
    1. Re:Interesting article by Tony+Hoyle · · Score: 1

      What makes Steve think that Microsoft, a company with billions of dollars in the bank, will be unable to afford to hire all the people needed to give the problem adequate attention?

      I dunno... how about the experience of the last 15 years?

    2. Re:Interesting article by Eric+Damron · · Score: 1

      That's just not logical. Microsoft can afford to hire the best. As long as they can keep their bean counting managers away from the workers they should be fine.

      --
      The race isn't always to the swift... but that's the way to bet!
  45. much like the "I'm with the Gov I'm here to help" by atarione · · Score: 1

    classic line..


    I mean realistically the reason we have all these 3rd party tools is because of the rather piss poor job m$ did on security to start with.

    i could be suprised i guess.... but it's all hype till it ships.

    --
    actually I am happy to see you, however that is in fact a banana in my pocket.
  46. What Threat? by Buzz_Ki!! · · Score: 1

    As a person that manages several hundred systems in an enterprise, I am very aware of the what does and does not work on our company's computers. In almost every case, NONE of the large commercial offerings for spyware/malware work for SH**. And typically, it takes more than one product to do a throrough cleaning. In nearly every product "shoot-out" I have ever read the freebie or independent software is as good as, or outperforms, the major players. MS does an okay job, but still misses the mark on a lot of "infections". Why? The flaw is leaving the definition of spyware up to a company like Microsoft, or Symantec, etc. Their own business practices, marketing agreements, licensing, and distribution methods are suspect to begin with. It would be the pot calling the kettle black. It is only from independent 3rd party developers that we can expect detection and removal of *everything* that you and I would consider spyware.

  47. Actually, this will HELP the independent vendors. by johnthorensen · · Score: 1

    If they play their marketing cards right, this could really be a boon for the independent anti-malware guys.

    There is a definite trait in the human personality that feels that a bone-stock mechanism isn't good enough. Evidence the number of after-market mufflers, 3rd party ringtones, Windows defragmentation utilities, et cetera that are sold every single day.

    By making anti-malware 'standard', Microsoft is actually enlarging the population of people interested in the product. As it stands now, there are a lot of people who still feel anti-malware is optional or haven't even a concept of what it is. Once it's standard in the OS, it not only won't be optional but there will be a huge market of people exposed to anti-malware that haven't been. And guess what? A goodly portion can be convinced that MS's offering isn't good-enough, and why don't you 'upgrade' to the Norton Super-Whiz Bang Mega Suite while you're at it?

    This is a big win for the 3rd party developers if they manage the opportunity correctly.

    -JT

  48. Extremely similar to insurgency... by ursabear · · Score: 1

    The anti-malware/anti-spyware/anti-virus/anti-badstuff war is extremely similar to insurgencies against governments (even historically, not just now).

    There are two aspects to this situation:
    1) How can these companies staunch the ever-widening, ever-innovative flow of assaults on the Internet?
    2) What will Microsoft's product do to the businesses who make much of their living from anti-badstuff software?

    For the first item, one can only hope to lessen the impact and severity of assaults. One cannot hope that massive counter-counter assaults and all-comprehensive-in-one approaches will work - as they do not when used against governmental insurgents. The more flailing and posturing on the part of the defender, the harder the black hats fight back. It (IMHO) is better to do your best, stay on top of things, and keep the users/public educated and intelligent about their computer use.

    For the second item, It is my sincere hope that Vista (or whatever it becomes) will not stamp out the small-and-medium size after-marketeers. Innovation is often fueled by people who are not working in a cubicle box for a giant company - but by a small- or medium-sized company that has its focus razor sharp.
    A similar thing was that IE did crush most competition for browsers for many years (and is still a huge installed base), but other companies and browsers have slowly crept back - perhaps because the shiny ball got dropped at Goliath's shop and picked up by an interested David's shop. I get the feeling that the anti-badstuff software market will probably cycle in a very similar fashion.

  49. Well, there was MSAV... by SimoM · · Score: 1

    Not sure where you are going with the anti-virus, since Microsoft has never released one.

    They have. There was a utility called MSAV in MS-DOS 6.

  50. Security focus by HangingChad · · Score: 2, Insightful
    Most industry watchers concede that it will be hard for Microsoft to easily displace the enterprise security businesses of leading vendors such as Symantec, McAfee and Trend Micro

    Mainly because many businesses will start asking the uncomfortable question about why they have to pay for an insecure software product then pay more for security software. I realize many companies are doing it now, but when the checks are going to different companies one can pretend you're buying network security. When both checks go to the same company it becomes glaringly apparent that you're paying for something many companies think should be included in the price.

    I realize it must seem strange but I really think this will do more to highlight MSFT's insecurity than boost revenue. Because it's sort of like rubbing a customer's nose in the fact that the product they're buying is basically not secure. I'm guessing MSFT will end up bundling the package at a price not far above where they are now, especially for big buyers. The little people will, of course, get the corporate shaft but most of them are used to it by now anyway. After the XP Activation Follies paying for security updates won't seem like much of a big deal.

    Not seeing a win here.

    --
    That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
  51. What a rediculous argument by Sathias · · Score: 1

    The next time I have to clean a nasty piece of spyware off one of my non-geek friends computers, I will thank my lucky stars that we have these third-party "security" companies to discourage Microsoft from writing a secure OS.

    --
    Blessed are the 1337, for they shall pwn the earth.
  52. Ant-Malware companies have nothing to fear by rudy_wayne · · Score: 1

    Every time Microsoft releasesa a new version of it's operating system, going all the way back to the days of DOS, they have bundeled more and more utilities with the OS and various "experts" have proclaimed that Microsoft is going to put 3rd party vendors out of business.

    But it never happens.

    Windows comes with all sorts of programs -- web browser, media player, text editor, CD burning, disk defragger, paint program, etc., etc. and yet there is no shortage of people producing their own competing products. In fact there are probably more good quality choices available today than 10 years ago.

    I doubt that Vista will put a serious dent in the anti-malware business.

  53. Matter of Scale by thunderpaws · · Score: 1

    This would not be an issue of the scope that it is if M$ had built the OS well in the first place. The anit-malware industry would not exist at the level it does were it not for this. If Vista truly eliminates the vast array of Windows fundamental problems, the anit-malware and security vendors will likely provide much better products that would be more cost effective and far less intrusive to the user. There was a time, for example, when 'Norton' utilities and anti-virus were well respected products, but the mess allowed by M$ poor design and decision making created an environment where the average Joe Consumer is compelled to buy suites of 'Internet Security' products that are resource hogs and UI nightmares. M$ history of patching then patching the patches has done little to ultimately make things better for the average consumer, and keeps anit-malware vendors distracted from innovating better tools.

  54. Someone Fill Me In... by u16084 · · Score: 1

    Maybe someone could fill me in... Microsoft being a developer, vendor..... By bundling Products they Developed (through acquisitions or what ever) Whats the Harm? Why isnt everyone chasing Apple for "bundling" Safari? No one said you HAVE to use Safari Or IE. Same applies to the ANTI(fill in the blank). IF someone has a product that is superior bring it on. Maybe a total solution to his bundling is - "We've installed Product X - But here are links to some other Products You might need/enjoy etc" Isnt that what Microsoft was doing when you clicked the original "Connect to the internet" icon? - Partnered with various isps. Maybe I'm missing the point, and im sure someone will Flame me all to hell for it.

    --
    -- I Dont Deserve A Sig I Have Bad Karma
    1. Re:Someone Fill Me In... by soloha · · Score: 1

      Internet Explorer IN Windows and Safari WITH Mac OS X are not comparable at all. Microsoft made Internet Explorer "an integral part of the operating system ... that you can't remove" (so they said in court). It was the only browser they offered, and they forced it on people. Apple provides Safari with Mac OS X, which uses KTHML, an open source renderning engine - which you can quite easily and safely delete. Not to mention that Apple distributed Internet Explorer on the Mac before developing Safari. The two approaches were entirely different. Whats the harm you ask? Just look at where we are with nternet Explorer today. I think consumers are obviously worse off because of Microsoft's approach.

  55. There are categories which are exceptions by Anonymous Coward · · Score: 1, Insightful

    Windows includes a built-in defrag. I bought PerfectDisk when I found out it worked better.

    Windows includes a built-in "remote desktop" capability. I use vnc for my remote-desktopping needs, because I prefer something multi-platform.

    Windows includes a built-in terminal program. Back in the day when such things mattered, I used SecureCRT, because it worked better.

    For those for whom the minimum is enough, because they don't have a critical business need for something better which justifies ante'ing up $$$, the MS-provided anti-malware solution will be better than nothing. The rest of us will just keep doing what we're doing, supporting the products we trust.

    This really is a DIFFERENT case from the Office situation, because much of what drove the takeover by Office was a combination of "it has to read and write Office documents because that's what our customers use" and "most of the clerks we hire are familiar with Office, so let's standardize on that". Anti-malware UI and file exchangeability aren't issues, so this is much less of a threat. It *IS* somewhat similar to the browser case. I think enough folks have learned "the browser stagnancy lesson" and moved on to alternatives, that they know better than to espouse the MS solution in this situation.

  56. I hate to say it... by Mad+Ogre · · Score: 1

    I hate to say it... but I hope so. I do... That the OS will be secure and stable and fast and such things as spyware, viruses, and popup ads will all be a thing of the past. I also hope one day we will have world peace. I hope to also win the lottery even though I don't play it. I also hope to have a night of wild sex with Jennifer Anniston and Salma Hyak. And I want to be the emporer of the moon too...

    --
    MadOgre.com
    1. Re:I hate to say it... by Pop69 · · Score: 1

      You forgot your sharks, with lasers !!!!!

  57. Anti-malware "Bundling" by paladinwannabe2 · · Score: 1
    I don't have a problem with Windows incorperating anti-virus software in their operating system. I don't see how it could be anti-trust or a monopoly to make your OS better able to deal with malware of various sorts.

    Of course, if they charge extra for Anti-virus software, that would be a bigger deal- it means that Microsoft is charging you more to deal with bugs they left in Windows. It doesn't take much brainpower to see a potential conflict of interest there.

    --
    You are reading a copy of my copyrighted post.
  58. Do you trust a whore to provide the condom? by Anonymous Coward · · Score: 0

    Why...what's that strange rash on my server? ;-)

  59. Put them all out of business by joschm0 · · Score: 0

    run linux

    --
    01/20/09
  60. Its time for linux people! by Intangion · · Score: 0, Flamebait

    if anyone is dumb enough to keep using microsoft after all this, they deserve the endless stream of exploits and viruses that are sure to plague their systems even worse than they already do

    microsoft has got it all figured out:
    1. sell insecure buggy unreliable software (windows, office, etc)
    2. wait for (or help?) hackers to exploit or infect the software your customers were dumb enough to buy
    3. SELL them fixes and protection and removal tools
    4. after a couple years start selling NEW versions of software, patch the old versions to not work or stop supporting them

    theyve actually been doing most of this for over a decade, step3 is new though and means more money the more unstable your software is! :)

    or you can use opensource and:
    1. get FREE software (os, office, multimedia.. all free)
    2. any issues discovered are easily patched quickly and freely (and can be by anyone)
    3. free malware protection (as if you even needed it)
    4. upgrade when you feel like it, if you feel like it. On your schedule, not microsofts

    can you afford not to switch?

    1. Re:Its time for linux people! by jofi · · Score: 1
      Are Linux compatible versions of my games free? Is Cedega free? (so much for free software)

      I keep installing Linux. I know how to configure everything to my liking but I always find myself only hours later uninstalling the bootloader and destroying any Linux partitions. I use a so called "limited account" in XP so I don't need (or even have installed) anti-virus, anti-spyware, and have no problem using IE (not that'd I want to because of Eolas).

      So tell me again how average users are supposed to figure how to install, say nvidia display driver (because the nv one is crap), if it breaks because of a new kernel version? I bother to patch the installer (which has never, ever been necessary in Windows) however, the people I am around don't have very much tolerance for these things. Oops, my distribution's provided kernel doesn't support more than 896MB of RAM or some of my hardware, gotta figure out how to compile highmem support and support for my other stuff.

      $me shoves you back into your basement.

      --
      Blame the user, not the software.
    2. Re:Its time for linux people! by Intangion · · Score: 1

      what games? where they free on windows? you cant expect games you pay for on windows to be free on linux, however many popular game engines provide linux native binaries for no extra charge. like quake and unreal series engines. Cedega isn't free, but Wine is and supports quite a bit (also with 1 google search you can find cedega for free)

      on ubuntu linux installing the nvidia driver takes 1 command (apt-get install nvidia-glx) and two minor edits to 1 file (which is plainly explained on half a dozen support forums/sites), it takes about 1-2 minutes for any non-techie granny. you dont even need to reboot either, just restart X (ctrl-alt-backspace)

      and complaining about compiling kernels is stupid, the default kernel on most distros can do just about everything, the only reason youd need to recompile it is to use some rare cutting edge feature in a new kernel (that the windows kernel doesnt support at all). or because you want to slim it down to optimize its speed/size, which is also something windows wont let you do. ubuntu's default kernel install supports more than most people would ever use and is easily upgraded with a single command or a few clicks

      the only valid point you make here is that using a "limited account" (something that any linux distro will set up by default, but windows doesnt) is good for security

      the only reason microsoft is more popular is cause its got better advertising ;) and has for a long time, it captured a larger market share first and most people are too afraid of change to try linux. Microsoft also enjoys better vendor support because of its popularity. whats interesting is despite the fact that microsoft has billion dollar budgets, has been more heavily advertised for longer, despite their cohersive licensing plans for retailers and big companies (charge for MS license per machine, not per machine using MS.. so if you sell or run 1000 computers and want to get bulk licensing you have to pay for 1000 licenses, even if only 500 have windows. that means selling computers with linux you still have to pay for MS licenses, unless you dont use bulk licensing so you have to pay them more) and despite everyones misconception that its 'better', linux has still managed to steadily gain a larger and larger share of users, on both server and desktop. and can run/use nearly all hardware and most (even MS proprietary) software and formats (way more than microsoft)

      whos in the basement?

      open source software is the future :)

    3. Re:Its time for linux people! by JonJ · · Score: 1

      on ubuntu linux installing the nvidia driver takes 1 command (apt-get install nvidia-glx) and two minor edits to 1 file (which is plainly explained on half a dozen support forums/sites), it takes about 1-2 minutes for any non-techie granny. you dont even need to reboot either, just restart X (ctrl-alt-backspace)

      And on SUSE this takes just running YOU and choosing the nvidia-driver. Is nvidia-glx in the default repos? Why does he have to do a command for installing it, apt has synaptic? We'll never convert people if we insist on telling everybody to use the CLI, some people will just refuse to do that.

      and complaining about compiling kernels is stupid, the default kernel on most distros can do just about everything

      He was complaining about lack of support for memory above 1GiB, and I don't think the default Ubuntu kernel has enabled high memory support. Sure, it could be a small matter of installing the linux-image-`uname -r`-smp or something like that(The quickest way, since smp/i686 kernels usually has high mem support enabled), but for regular Joe, this is a crippling of the operating system. I've installed usually Fedora, Debian or SUSE on my own computer, and both Fedora and SUSE installs an smp-enabled kernel when that was necessary. Seriously, Ubuntu is taking a step backwards.

      --
      -- Linux user #369862
    4. Re:Its time for linux people! by howlingmadhowie · · Score: 1

      a lot of the problems had with GNU/linux come because it is either illegal or impossible for GNU/linux to solve these problems. illegal because of patents or similar, and impossible because the hardware manufacturer doesn't release the specs for the hardware.

      blaming linux for this is a bit like shooting someone in the leg and then saying to others 'you don't want to work with him, he's a cripple'

      howie

  61. It's a great POINT solution by winkydink · · Score: 1

    The gist of the article is that the Big 3 provide a suite of solutions, not just A/V. Yes, there are people out there who prefer putting together their own suite and maintaining it all by themselves. And that's perfectly ok.

    However, there is a larger group of people out there who would rather throw money at the problem and make it go away (or at least make somebody else try and make it go away on their behalf). That's the solution the Big 3 offer.

    --

    "I'd rather be a lightning rod than a seismometer." -Ken Kesey

  62. Look at the WinXP Firewall for an analogy by Opportunist · · Score: 1

    Remember? WinXP comes with its own firewall (a pathetic excuse for a firewall, but there is one). Did ZoneLabs go out of business? Or Kerio?

    No. For a simple and very logic reason: The VERY FIRST thing any given malware today has in its code is some piece of code to turn the WinXP "firewall" off or grant itself permission to pass through it. It's Registry configured, a well placed call to RegCreateKey fixes this "problem" easily.

    Why should we expect it to be different with an MS-antivirus tool?

    Yes, the overhead grows for malware writers, since they'll then have to disable another thing in the windows security service. Since many Windows users surf as admins (or at least don't mind logging in some admin account if asked by ANY kind of program), it's far from a problem to disable anything.

    But anyone who tries to secure his computer sensibly will not rely on a MS-Antivirus but try to get a third party tool, just like they now rely on third party firewall systems. Because EVERY piece of malware written WILL be tested if it "works" with MS-Antivirus on the system, or try to kick the MS-Antivir suit from the tasklist.

    I even predict malware packages that come with a bogus MS-Antivirus, so they can run in plain view of the User. After all, the User EXPECTS the MS-AV to run (while you can't so easily spoof being Kaspersky or McAfee, not knowing whether the user actually uses those programs).

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    1. Re:Look at the WinXP Firewall for an analogy by Anonymous Coward · · Score: 0
      a well placed call to RegCreateKey fixes this "problem" easily.

      All bets are off if you run as administrator... some (okay.. one) used "net stop". Again that is if you are admin. Windows simply won't allow it if you don't have the permissions to do so.

    2. Re:Look at the WinXP Firewall for an analogy by Opportunist · · Score: 1

      Well, most home users DO run around with admin privileges open to anyone willing to take them. Out of neglect, but partly also out of necessity. Many (far too many, IMO) programs need administrator privileges to run smoothly. I never really understood why a user program (like, say, a game) needs admin privs, but they do.

      So no wonder many users, especially when not too tech-savvy and not really used to the idea of different privilege levels, simply run around with an admin account at home and no "user" account. It's easier, hassle free and "everything works".

      Unfortunately, everything works for the malware, too.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    3. Re:Look at the WinXP Firewall for an analogy by jofi · · Score: 1
      I never really understood why a user program (like, say, a game) needs admin privs, but they do.

      You need to be able to write to the game's folder. Admin privs is *not* a prerequisite for more write privileges. You can add write privileges for other accounts without changing their group. Many games are designed like that (but not Halo PC which is published by Microsoft!). There's a secdrv.sys update that eliminates the "You must be admin" message for games in XP (2000 isn't affected).

      99.9999999999999999999999999999999999999999999% it is 3rd-parties making it a bitch to work with (however for me it is no problem-o). Then again, I wonder why I was required to run KDE 3.5.1 as root first in order to use it under my account (at first it said it couldn't find startkde under my account, but decided to try it under root and that is when it worked).

      --
      Blame the user, not the software.
  63. Effective monopoly in one segment... by Svartalf · · Score: 2, Informative

    Since they have an effective monopoly on the desktop OS segment, they can't move into the other segments using the same.

    They, because of their relative size in the market, can't just be putting anything and everything into their products as a bundled deal. It's the same story with the media player and browser software they're already in trouble (though with the browser, they got a slap on the wrist over it- it remains to be seen on the media player software, but it's not looking as good for Microsoft on that front...).

    Once you become an effective or complete monopoly, the rules for business change for you.

    --
    I am not merely a "consumer" or a "taxpayer". I am a Citizen of the State of Texas
  64. We overlook something by GregNorc · · Score: 2, Insightful

    These computers will be operated by humans. That is one security hole no one can fix. To us, it seems easy. We're programmers, pen-testers, geek squad members. We're basically lucky enough to have a hoppy that pays well. Not everyone thinks like a geek. Joe Sixpack doesn't give a damn how his computer works, and doesn't want to learn how it works. He just wants to browse the net, send e-mail, and maybe if he's feeling frisky put up a new desktop wallpaper. These people don't know what a "root password" is. They don't know what an "address bar" is. They don't know or CARE. Look, if a phisher just has to ask nicely for Aunt Sally's debit card PIN, what makes you think she'll think twice when we change "pin" to "root password", "firewall password" or anything else? Hell even biometric security won't work because she'll just slide her thumb right in there so she can get the latest hot ring tones.

    1. Re:We overlook something by pegwole · · Score: 1

      So when will anti-virus companies realize Windoze eXcriment Pile is a virus and only opens the door to spyware?

      --
      Penguins: good mascot, better burger.
  65. WTF??? by Anonymous Coward · · Score: 0

    Let's see, the average Slashdotter will probably revile Microsoft for not making their OS secure enough.

    Will the average Slashdotter come down against these companies for opposing Microsoft taking the neccessary steps to protect their OS? Not even the arguments about Microsoft being a monopoly are enough to sway me.

    It'd be like saying GM or Ford can't make their cars safer and easier to drive because that reduces the business of emergency rooms.

    I just don't get it.

    Oh wait, I do. It's hypocrisy.

    Sorry, but I support Microsoft's efforts to secure their computing environment, and as long as they do not actively create constraints that impair the operations of third-party software, I'm afraid I'm unconcerned. So as long as people can install Mcaffee or Norton AV on their systems if the respective companies make the software, I don't care. If those companies can't convince people to buy their products, oh well.

    1. Re:WTF??? by chawly · · Score: 1

      This caught my eye:

      "Sorry, but I support Microsoft's efforts to secure their computing environment"
      My feeling is that there is no need to be sorry. We all support Microsoft's efforts to move towards securing their computing environment. As indeed we all wait - and with no little interest - for the movement to begin and the first concrete results to emerge. Please believe that we are all interested, and that we have not lost hope (only temporarily mislaid it).
      --
      How many beans make five, anyhow ? ... Charles Walmsley
  66. But .. but .. but.... by jesterzog · · Score: 1

    ...Surely they had a strategy, right?

    First M$ creates an entire industry focused around fixing holes in their OS. Now they are threatening to fix their own holes and that industry is mad at them?

    I find it hard to understand that companies such as Symantec and McAfee apparently haven't had a strategy prepared for this eventuality. If you've built a business on Microsoft's incompetence, then surely you'd have to expect that sooner or later Microsoft's competence would either improve, or Microsoft would go out of business, taking with it any businesses that leech off its existance.

    If they truly haven't been prepared for this, they deserve to become obsolete.

  67. What about legacy OS's by 1.21GW · · Score: 0

    Antivirus and antispyware companies will have a customer base for another decade at least because not everyone will make the jump to Vista at once. Many people still run Windows 98 and even *gasp* Windows 95. The many W95,W98, and XP users will provide income for antivirus companies for a long time ahead.

  68. You didn't follow the settlement very closely. by Anonymous Coward · · Score: 0

    Your first offense argument is ignorant of the facts.

    The DOJ signed an agreement saying that they would never again prosecute MS for bundling ANYTHING. Ever.

  69. Even if Vista was Spyware and Virus proof... by binaryspiral · · Score: 1

    Ignorant consumers would be lining up around the block to upgrade their antivirus and antispyware software... and that folks, is a very large market.

  70. Microsoft Anti Virus by Nick+Driver · · Score: 1

    Not sure where you are going with the anti-virus, since Microsoft has never released one. But when they do, I'm pretty confident it'll steal the market share too.

    MS put out an antivirus way back in the early 1990's with MSDOS ver 6.0 based upon the Central Point Anti-Virus product which was later incorporated into Symantec/Norton Antivirus.

    My oh my, how quickly we forget history.

  71. M$ Never Released A Decent AV by zenhkim · · Score: 1

    "Not sure where you are going with the anti-virus, since Microsoft has never released one."

    Well, technically they *did* -- it was MSAV.EXE for DOS 6.x/Win3.x before they unleashed the monster that was Win9x....

    Problem was, MSAV was such a worthless piece of shit that you would have to be insane to rely on it for protection against viruses. Not a good omen for WinVistaAV (or whatever the hell they're going to call the Brave New Anti-Virus) -- but then again it wouldn't surprise me in the least. Every time M$ jumps into some new category of application they almost invariably manage to fuck it up for everyone.

    --
    "All hands, BRACE FOR IMPACT!"
  72. Whats wrong with multiple AV software packages??? by Tezkah · · Score: 1

    It is not so much the two being installed on the system, but most I've seen run all the time in the background scanning files. Two programs scanning files you are opening ("On Access" protection!)for teh virus!!!1! is a Bad Idea.

    But with the new Intel Core Duo, you could do that easily!

  73. Remember MSAV?? by sonofdelphi · · Score: 1

    >Not sure where you are going with the anti-virus, since Microsoft has never
    >released one.

    MS used to bundle an antivirus tool with DOS. They used to call it MSAV.
    IIRC, there was one called MWAV too.

    http://www.computerhope.com/msavhlp.htm

    From the link,
    "the Windows 3.x version may think Windows 95 is a Virus."!!! :-)