Slashdot Mirror


Spy Sweeper, the Next Netscape?

GenieGenieGenie writes "AP is running a story about Webroot's Spy Sweeper, specifically about the competition it's facing from Vista's bundled anti-spyware. Webroot's CEO David Moll maintains that 'The taking of a second-best product in this space [i.e. Vista's Defender, f.k.a. AntiSpyware] is akin to locking half the doors in your house,' but others seem to think that if Moll doesn't want his company to become a second Netscape, it would 'ultimately [...] need to offer more than just an anti-spyware package.' The interesting issue here is whether this need for broadening the offer would be the case also for other leading companies subject to similar 'bundled-with' competition."

256 comments

  1. woah now... by ribo-bailey · · Score: 0

    You mean they're not just going to sue Microsoft?!?

    1. Re:woah now... by Philip+K+Dickhead · · Score: 1

      All of this, discussed on a link from /. which tries to load SIX cookies through my browser!

      Now - more than ever...

      --
      "Speaking the Truth in times of universal deceit is a revolutionary act." -- George Orwell
    2. Re:woah now... by mausmalone · · Score: 1

      I'm sooooo glad they're not. I would be really pissed if after years of people bitching about Windows vulnerabilities, someone cries "antitrust" when they try to patch one.

      --
      -=-=-=-=-=
      I'd rather be flamed than ignored.
    3. Re:woah now... by tirnacopu · · Score: 1

      Off-topic note: please relax on the "installs cookies" issue: it is a tracking method - yes. There are also other far more reliable methods which achieve the same purpose. Your only way of escaping tracking now is to
      #1 Block cookies (of course)
      #2 Disable any form of scripting (easy)
      #3 If that is not feasible - learn AJAX and MANUALLY examine every page to check if anything is transmitted without your knowledge
      #4 Again, manually examine any GET or POST form looking for hidden fields
      #5 Randomly change your IP (tor), referrer and user-agent (modify Firefox's extension?)

        If you manage to solve issues #3 and #4, please post the solution - anonymously ;) - for the benefit of mankind :)

      PS. You might also want to consider configuring privoxy to block any 1x1 pixel gifs

    4. Re:woah now... by Wikipedia · · Score: 0


      I think he uses IE

      --
      P2P Anonymous Distributed Web Search: http://www.yacy.net/
  2. Opportunity! by Ohreally_factor · · Score: 5, Funny

    I think there's an opportunity here for someone to sell a spyware app, but to bundle a free operating system with it. That ought to hit MS where it hurts. =)

    --
    It's not offtopic, dumbass. It's orthogonal.
    1. Re:Opportunity! by Darkman,+Walkin+Dude · · Score: 1

      What gets me about all this is why MS is even releasing an antispyware program... wouldn't they be better off patching their own code? Its like someone trying to sell you repairs to their broken product. Yes I know its free - for now.

    2. Re:Opportunity! by amliebsch · · Score: 3, Insightful

      Why would presence of spyware indicate a defect in the code?

      --
      If you don't know where you are going, you will wind up somewhere else.
    3. Re:Opportunity! by Andrew+Kismet · · Score: 2, Insightful

      Um... if software can invasively monitor the Operating System without the user's knowledge, there's a flaw in the Operating System.

    4. Re:Opportunity! by Anonymous Coward · · Score: 1, Insightful
      Um... if software can invasively monitor the Operating System without the user's knowledge, there's a flaw in the Operating System.

      Um... If a user downloads a web browser, and the web browser sends everything he enters onto web pages to some spyware company, how is the operating system supposed to protect agains that? The only way is for it to maintain a list of signatures of previously identified malware and detect it. In other words, an anti-spyware facility.

    5. Re:Opportunity! by Anonymous Coward · · Score: 0

      Hey, I'm running OpenBSD amd64 on my HP zv6000 laptop. Does this qualify?

    6. Re:Opportunity! by creepynut · · Score: 4, Informative

      And then there's the programmers who sell out and bundle [spy|ad]ware with their programs. Sure, you can opt out, but most people only care to click Next, next, finish.

      Let's not forget programs like Kazaa, if it's even still around, which actually REQUIRE you to not only install, but keep the crapware on your system in order to run it.

      Defects in the operating system indeed.

      Of course, a lot of the nasty crap that gets on your computer without you DOING anything is generally on rathe questionable sites (e.g. Warez sites). This is thanks to lacking security in Internet Explorer, not the OS.

    7. Re:Opportunity! by TheShadowzero · · Score: 1, Insightful

      And yet, Internet Explorer is an integrated and core application for the OS...you can't uninstall IE [on a Windows box]. Note the insane amount of time it takes to upgrade IE.

      --
      If history repeats itself, why can't we study the future?
    8. Re:Opportunity! by Darkman,+Walkin+Dude · · Score: 1

      Spyware by its very name is not desireable on a computer. No one wants it there, except obviously its makers. The problem that arises is when this spyware is running invisibly, and with no easy way to uninstall it (cool web search anyone?), even assuming the user ever finds out it is there. I'd call the fact that spyware manufacturers can produce parasitic software definetly indicative of defective code.

    9. Re:Opportunity! by tirefire · · Score: 0, Offtopic

      Your signature is from a song by Orbital and they are the COOLEST.

    10. Re:Opportunity! by Anonymous Coward · · Score: 0

      You know, the fact that the OP says its a security issue in the OS instead of IE doesn't diminish the assertion that MS is selling a broken product and then charging you to fix it. It's cheap and wrong; it's the same issue with them selling anti-virus. They could just fix their OS and we wouldn't have the twenty-odd-zillion viruses a month; why have anti-virus code that actively seeks "bad" code to head it off at the pass when you can have auto-patching code that makes the bad code ineffective by way of patching the initial exploit? Because it's a new market they can move in to is why, to hell with their consumers.

    11. Re:Opportunity! by __aabwba5127 · · Score: 0

      When the OS and the browser are as tightly integraded as windows and IE, that makes your point moot!

    12. Re:Opportunity! by drsmithy · · Score: 5, Insightful
      What gets me about all this is why MS is even releasing an antispyware program... wouldn't they be better off patching their own code?

      Anti-spyware (and antivirus) software isn't protecting from defects in the code, it's protecting from defects in the user.

    13. Re:Opportunity! by drsmithy · · Score: 2, Insightful
      Um... if software can invasively monitor the Operating System without the user's knowledge, there's a flaw in the Operating System.

      So... which OSes are you thinking of that aren't "flawed" ?

      Not to mention, how is it a flaw in the first place ? How is the OS supposed to know that the monitoring *isn't* "without the user's knowledge" ?

    14. Re:Opportunity! by Ex-MislTech · · Score: 1

      Why would presence of spyware indicate a defect in the code?

      The WELL known ActiveX exploits in IE have been there for a LONG time .

      MS refuses to fix them .

      Thus how it might be indicative of a defect ...

      And pusposely so ...

      For many people, using a non-Microsoft browser such as Firefox is now a must for secure Web surfing--but most still keep a copy of Internet Explorer around just in case.

      http://news.com.com/Planning+to+dump+IE+Think+agai n/2100-1032_3-5388755.html

      Ex-MislTech

      --
      google "32 trillion offshore needs IRS attention"
    15. Re:Opportunity! by Ohreally_factor · · Score: 1

      Actually, it's the butthole surfers*, if I'm not mistaken. However, who knows if either one borrowed it from the other. Which Orbital song and CD were you thinking of? I'll check it out.

      *The Locust Abortion Technician CD, I think. Sweet Loaf.

      --
      It's not offtopic, dumbass. It's orthogonal.
    16. Re:Opportunity! by grogdamighty · · Score: 2, Funny

      I completely agree - only a user with a defect would use Internet Explorer. ; )

      --
      My other sig is funny.
    17. Re:Opportunity! by Zwaxy · · Score: 1

      That's "Sweat Loaf", not "Sweet Loaf".

      "Daddy, what does regret mean?
      Well son, the funny thing about regret is,
      It's better to regret something you have done,
      Than to regret something you haven't done.
      And by the way, if you see your mom this weekend,
      Be sure and tell her, SATAN, SATAN, SATAN!!!"

    18. Re:Opportunity! by mrchaotica · · Score: 4, Funny

      Hmm, that business tactic sounds familiar... oh yeah, that's right--the Mafia does the same thing!

      "Yeah, you'd better buy our 'protection service,' cause, you know, Vinnie and me would sure hate to see something happen to your computer..."

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    19. Re:Opportunity! by BrokenHalo · · Score: 1
      but most still keep a copy of Internet Explorer around just in case.

      Three or four years ago, I might have agreed that might be a useful idea. That was about the last time I encountered a real show-stopper of a site that needed a Windows box to do the job (in this case it was an online banking session my sister needed).

      But for my own purposes, I've been running alternative browsers exclusively on Linux since 1997 without any major problems. The simple fact is that if web developers make it hard for me to get around their site, I simply leave it and don't come back.

      End of story.

      Actually, I think they have been pretty much getting the messsage over the last few years; cutting out sections of your market unnecessarily doesn't make good business sense.

    20. Re:Opportunity! by misleb · · Score: 1

      So if you used Windows on a daily basis, you would not run a virus scanner or a spyware scanner? You would rely solely on your personal computing prowess to prevent and/or remove all infections? If you say yes, first I'll call bullshit. Then I'll ask how you can expect this kind of tech savvy from your average user.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    21. Re:Opportunity! by Anonymous Coward · · Score: 1, Informative
      I completely agree - only a user with a defect would use Internet Explorer. ; )

      That is an erroneous statement. I have a job which requires me to log on to a web site to fill out daily reports, and it only works with Internet Explorer. And no, IE Tab extension for firefox doesn't work either.

    22. Re:Opportunity! by tirefire · · Score: 1

      It's from a CD single, I think. Not sure which version I have as it's been released in several forms, but the song name is Satan and it's by Orbital.

      The "daddy, what does regret mean" part is at the start of an otherwise wordless song, so Orbital may have borrowed it.

    23. Re:Opportunity! by Ex-MislTech · · Score: 1

      I wish it were so, but "some" sites are MS only, and it is more of MS
      doing their monopolistic BS they have been pulling for years .

      It is due to ASP pages not recognizing Firefox and refusing to
      work with them, some ppl have made work arounds, but a lot of
      the older sites and less open source aware ones have no clue .

      http://www.asptoday.com/Content.aspx?id=2339

      If MS wants to make it a pain, they will, and have in the past
      java/j++ comes to mind .

      Ex-MislTech

      --
      google "32 trillion offshore needs IRS attention"
    24. Re:Opportunity! by Anonymous Coward · · Score: 0

      How is the OS supposed to know that the monitoring *isn't* "without the user's knowledge" ?

      If the operating system ultimately does not offer any answer to that question, then that by itself constitutes a flaw.

    25. Re:Opportunity! by drsmithy · · Score: 4, Insightful
      So if you used Windows on a daily basis, you would not run a virus scanner or a spyware scanner?

      Not only "wouldn't" I, but I don't.

      I do, occasionally (maybe once every 6 months) run the online scanners over my PC. Thus far, no infection has ever been detected.

      You would rely solely on your personal computing prowess to prevent and/or remove all infections?

      I rely on common sense and the security facilities of my OS to avoid infection in the first place. In particular, I don't execute code I can't verify the source of, I don't run as a high-privilege user for day to day tasks and I filter inbound network connections to my computers.

      I will also point out that these are the exact same procedures I follow on *all* the OSes I use.

      If you say yes, first I'll call bullshit.

      I don't really care what you "call". Ten years of Windows use without a single exploit from malicious code is enough evidence for me that my methods work the majority of the time.

      Then I'll ask how you can expect this kind of tech savvy from your average user.

      Most malware - or, more accurately, the vector it uses - doesn't require even the slightest level of "tech savviness" to identify. How many people, if someone knocked on their door and said they were from their bank, would hand over a blank cheque and signature specimen for "verification purposes" ? Compare that to how many are happy to hand over their banking usernames and passwords to email and web based banking scams.

      One of the fundamental problem, IMHO, is many people are still working under the impression that stuff on the "internet" isn't "real", and that actions online can have genuine consequences out in the real world. My guess is they figure that since Word has an undo button, then everything else they do with the computer can be similarly easily "undone". Malware is going a long way towards rectifying this attitude (one of its few upsides).

      Now, with all that said I certainly wouldn't recommend most people go without anti-virus and anti-spyware tools. Particularly since most "normal users", IME, are primarily using the internet for inherently high-risk behaviour (swapping software, documents and other data). However, the simple fact is that neither anti-spyware, nor anti-virus software, is there to protect the user from flaws in the OS (although it may do this as a side effect). It's there to protect the user from flaws in their behaviour. No level of OS security known can protect from the user deliberately executing malicious code.

      (I use the word "flaws" here in the context of safe computing practices, not behaviour in general. I don't think for a second people *shouldn't* be doing the things they do with computers that typically lead to malware infection.)

    26. Re:Opportunity! by Overly+Critical+Guy · · Score: 2, Insightful

      Let's not forget programs like Kazaa, if it's even still around, which actually REQUIRE you to not only install, but keep the crapware on your system in order to run it.

      Many programs don't alert you of any of the things they're installing. On, say, OS X, you'd get a security prompt if something tried to modify the system without your knowledge.

      Defects in the operating system indeed.

      Yes, indeed.

      Of course, a lot of the nasty crap that gets on your computer without you DOING anything is generally on rathe questionable sites (e.g. Warez sites). This is thanks to lacking security in Internet Explorer, not the OS.

      Internet Explorer is bundled with the OS and is tied to it. The lack of functional limited privilege accounts is also an OS flaw. All the little flaws in Windows build up to create a very tasty target for malware authors.

      --
      "Sufferin' succotash."
    27. Re:Opportunity! by odourpreventer · · Score: 2, Insightful
      Yes I know its free

      No, it's not. The cost is hidden in the price of the OS.

      This is what irritates me most about MS's offers (i. e. Windows Media Player and Internet Explorer). They have never been, never are, and will never be free. The cost is just hidden elsewhere. "Free" is just an illusion.

    28. Re:Opportunity! by Ponzicar · · Score: 1

      Don't get me wrong, there is no shortage of bug exploiting spyware apps. However, even the best programmed OS in the world won't stop someone from downloading and running an infected exe.

    29. Re:Opportunity! by Jim_Callahan · · Score: 1

      It will always be free, because lavasoft's spyware sweeper is free and probably better. If you charge (i.e. stop bundling) you lose the convenience factor, which is all that you had going for you.

      Plus, I'm picking up form context that the utility is just part of the OS, not a separate program you'd think to charge for. Could be wrong, though, didn't read the article.

      --
      ...it's really a sad day for America when we require a goddamn ACT OF CONGRESS to make our DVD players work properly. ~
    30. Re:Opportunity! by Filip22012005 · · Score: 1

      You may be right, but then how does Defender know that monitoring isn't with the user's knowledge? Which may be related to an more philosophical question of what spyware actually is. I hate stuff that stays in the tray for example. Real was making such sucky software that never seemd to really go away and talk about updates continuously. Apparently it's phoning home.

      --
      When the policeman of the tie, rule you violate, hello punishment of the kitty?
    31. Re:Opportunity! by hairyfeet · · Score: 2, Informative
      Who says you can't uninstall IE?http://www.nliteos.com/nlite.html

      I do it all the time.Use it for making a more secure machine for those that aren't computer savvy.Just install a better browser(I install Kmeleon,Firefox,Opera,And Seamonkey and let them choose what's best for them) and leave mshtml.dll for those programs that use it in their help files.

      If you want to strip it from an exsisting pc,Here you go--http://www.litepc.com/xplite.html.It's not free,But $39.95 isn't a lot to pay when you consider all the MS crapware that it lets you toss.Not to mention the Malware can't exploit what isn't there.

      --
      ACs don't waste your time replying, your posts are never seen by me.
    32. Re:Opportunity! by IWantMoreSpamPlease · · Score: 1

      >>...no infection has ever been detected

      "Detected" being the operative word here.

      --
      So rise up, all ye lost ones, as one, we'll claw the clouds.
    33. Re:Opportunity! by 7ft_Big_Guy · · Score: 1

      Spy Sweeper is an ineffective piece of crap anyway. so far, I have had to repair at least a dozen PC's that used spyware sweeper due to massive amounts of spyware on them basically cranking them to a halt... Adaware SE personal and Spybot S&D cleaned them completely, where Spy Sweeper let all the crap in. If they go bankrupt because of this, they are doing the PC users a favor!

    34. Re:Opportunity! by Gr8Apes · · Score: 1
      No level of OS security known can protect from the user deliberately executing malicious code.


      Sure there is. It's the read only, can't write to the disk, can't create/save any files with executable privs security level. You can achieve this simply via a CD/DVD only boot machine sans HD, or via a well secured system. Even windows can be secured at this level, although you won't be able to run much on it, especially no MS software.

      I've seriously considered creating this type of installation for certain relatives. After infection #6 of a particular person, and the fact that another machine in that house has 0 issues, has finally made this person see the light. (Hooray, and less support calls for me I hope!)
      --
      The cesspool just got a check and balance.
    35. Re:Opportunity! by ElleyKitten · · Score: 1

      So if you used Windows on a daily basis, you would not run a virus scanner or a spyware scanner? You would rely solely on your personal computing prowess to prevent and/or remove all infections? If you say yes, first I'll call bullshit. Then I'll ask how you can expect this kind of tech savvy from your average user.

      My husband does this. He uses Firefox exclusively, doesn't download crap like Kazaa and Weatherbug, and somehow he manages not to get much spam (it helps that everyone who emails him is either smart enough to use Firefox and not download crapware or used Linux).

      I wouldn't expect average users to be that careful either, which is why I hook up everyone I know who isn't that careful with Linux. A good install of Mepis or Ubuntu and they can do anything they want, without worrying what will happen if they click that link. Unless, of course, they type in their bank account number in that link, in which case Linux and all the anti-crapware programs in the world can't save them.

      --
      "What is Internet Explorer 7? Are you saying we can't access the normal internet?" - I love tech support. Really.
    36. Re:Opportunity! by objwiz · · Score: 1

      Back in the early-mid 90s my friends and I tried a similar approach to email. At that time, MS offer Outlook Express for free. It was a pretty crappy product.

      We constructed our email client (emailmax). It offered a lot of features that OE didnt have at that time. We still found it hard to sell our product. Biggest reason: why pay for something when I get something similar for free?

      I suspect that will be case with antivirus/spy-sweeping software as well. For most people, the fact that they have something, regardless of quality or effectiveness, will be sufficent.

    37. Re:Opportunity! by misleb · · Score: 1

      I do, occasionally (maybe once every 6 months) run the online scanners over my PC. Thus far, no infection has ever been detected.

      Well, that is viruses. I would agree that viruses can be easily avoided with a non-OE mail reader, regular security updates, and simply not executing files sent via email. Spyware, on the other hand, is a lot easier to get infected with. It can come bundleed with other software with little or no notice to you before installing. If you happen to use IE (i'm guessing you don't), spyware can be installed just by viewing shady web sites with careless ad providers. You should run a couple spyware scanners. I would be surprised if you are completely clean. But, if you are, congrats on your tech savviness and paranoia. Even the most careful Windows users that I know get spyware now and then. I don't blame the users and I don't necessarily blame MS. I blame the people putting the shit out there in the first place.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    38. Re:Opportunity! by Anonymous Coward · · Score: 0

      That doesn't protect you from malicious code. It only protects you from damaging data. Malicious code can still look for information on your machine you'd rather not give to the rest of the world and upload it to some random server out there. Though, there probably won't be much data available on a machine that you can't save anything to. And frankly, such a machine wouldn't be terribly useful.

    39. Re:Opportunity! by OwnedByTwoCats · · Score: 1
      Who says you can't uninstall IE?
      Microsoft, at their anti-trust trial.

      They said it couldn't be done, to prove that IE was an integral part of their operating system.
    40. Re:Opportunity! by Anonymous Coward · · Score: 0

      True, but a well written OS isn't going to allow user-land processes to overwrite, install, etc. crap without alerting and waiting for confirmation from the user. Windows allows stuff like far too easily.

    41. Re:Opportunity! by Yankovic · · Score: 1

      Can you please identify some of those well known ActiveX issues that MS has refused to fix? Secunia, eEye etc. don't seem to list any.

    42. Re:Opportunity! by drsmithy · · Score: 1
      "Detected" being the operative word here.

      Your logic dicates that every platform is infected.

    43. Re:Opportunity! by drsmithy · · Score: 1
      Sure there is. It's the read only, can't write to the disk, can't create/save any files with executable privs security level. You can achieve this simply via a CD/DVD only boot machine sans HD, or via a well secured system. Even windows can be secured at this level, although you won't be able to run much on it, especially no MS software.

      That's not OS security, it's physics.

      Not to mention, it still doesn't stop the user deliberately executing malicious code. It just stops that malicious code from infecting the system.

    44. Re:Opportunity! by Gr8Apes · · Score: 1

      Exactly how are you going to run this malicious code?

      I'm serious. If you've setup your system correctly, there will be no way to save anything to run it (note - all web malicious code a user wants to execute has to save somewhere to run). Also, if your mail client won't let you run executables directly without saving....

      As for not being terribly useful? Sure it is - it's a web portal. It's what many people use 99% of their PC time for. Web based email, Web based photos, web everything. Now, for you and me that's probably not feasible, since I couldn't imagine trying to do video editing with a web-based app. But, it is useful for those things where malicious code is the problem.

      --
      The cesspool just got a check and balance.
    45. Re:Opportunity! by IWantMoreSpamPlease · · Score: 1

      Not at all, I'm simply stating that the level of defense is only as good at the AV scanner is.

      If nothing is detected, but the scanner is crap, then you might be rooted, but not know it.

      --
      So rise up, all ye lost ones, as one, we'll claw the clouds.
  3. Uh, wouldn't we WANT a new netscape? by Tezkah · · Score: 1, Insightful

    I mean, with the demise of Netscape we got much BETTER browsers, in the way of Mozilla and Firefox and Camino. An MPL'd spyware scanner for windows? I dont think it will have that wide of appeal though...

    1. Re:Uh, wouldn't we WANT a new netscape? by Anonymous Coward · · Score: 0

      I mean, with the demise of Netscape we got much BETTER browsers, in the way of Mozilla and Firefox and Camino

      Unfortunately, those browsers account for only about 10% of the installed base. The real crux of the problem is that even though there are superior browsers, 90% of users use the (questionably) inferior product, Explorer, because it is installed by default with the operating system.

      --
      This anonymous post was brought to you by the image-protected password: "ceases"

    2. Re:Uh, wouldn't we WANT a new netscape? by Red+Alastor · · Score: 1
      I mean, with the demise of Netscape we got much BETTER browsers, in the way of Mozilla and Firefox and Camino. An MPL'd spyware scanner for windows? I dont think it will have that wide of appeal though...
      No, it has a wide appeal as long as geeks suggest to their families what to install (or install the apps for them). You don't think Joe Average found Firefox by himself, don't you ?

      Beside once the snowball is started, it can become really hard to stop.

      --
      Slashdot anagrams to "Sad Sloth"
    3. Re:Uh, wouldn't we WANT a new netscape? by Anonymous Coward · · Score: 0

      "We" are not the mainstream. Most people still use IE. Before IE was bundeled with Windows, there was actually some mainstream awareness of the options avaliable for browsers. Now, most people just use the "blue 'e'" as their browser.

      Even with all the traction Firefox has been making, IE still has a strong majority. The mainstream user -and the internet as a whole- has been unfairly hurt by the bundling of IE with Windows.

      It is likley that the same thing will happen with the spyware app, although I don't see it being as harmful as IE has been.

    4. Re:Uh, wouldn't we WANT a new netscape? by Bogtha · · Score: 4, Insightful

      No. The demise of Netscape led directly to Mozilla.org pissing about for over four years without a stable release while Internet Explorer simply soaked up all the marketshare.

      We might have better browsers now, but imagine where we'd be if a) Netscape continued to be a organisation that actually shipped software and b) Microsoft actually had to compete against another browser. We might have a decent Internet Explorer, for one thing, as things stand, Internet Explorer really has retarded web development for years.

      --
      Bogtha Bogtha Bogtha
    5. Re:Uh, wouldn't we WANT a new netscape? by Lord+Kano · · Score: 1

      I mean, with the demise of Netscape we got much BETTER browsers, in the way of Mozilla and Firefox and Camino. An MPL'd spyware scanner for windows? I dont think it will have that wide of appeal though...

      That leaves the obvious question though of what innovation would Netscape have brought to the market if they hadn't been crushed?

      LK

      --
      "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
    6. Re:Uh, wouldn't we WANT a new netscape? by Dionysus · · Score: 1

      You don't think Joe Average found Firefox by himself, don't you ?

      One of my friends, who has no interests in computers at all (other than as a tool), uses Firefox. Installed it himself. You would be surprised.

      --
      Je ne parle pas francais.
    7. Re:Uh, wouldn't we WANT a new netscape? by Red+Alastor · · Score: 1
      One of my friends, who has no interests in computers at all (other than as a tool), uses Firefox. Installed it himself. You would be surprised.
      I'm fully aware of that. My point is that the trend would not have started if we didn't started it. If there wasn't geeks to initially push Firefox, there would not be more Firefox installs among non-geeks then installs of Bonzi Buddy.

      That's what I meant by snowball. Now that it started, it's going to grow on its own. Same with that potential open source anti-spyware. If we show it to our friends and families they will eventually show it to their friends and families too.

      --
      Slashdot anagrams to "Sad Sloth"
    8. Re:Uh, wouldn't we WANT a new netscape? by EvilSS · · Score: 1

      Probably the same quality software they were putting out when they tanked: CRAP. I realize that /. is in love with this myth that Netscape was this awesome browser that the evil MS crushed with their inferior product, but the truth is Netscape is as much to blame for what happened as MS. At the time their browser sucked compared to IE. Had they focused on the browser instead of trying to pile loads of extra junk into it the outcome might have been different, but they didn't and they died a horrible, horrible death (purchased by AOL). In retrospect it's probably the best thing that could have happened, since now there is a good alternative browser, and you don't have to pay $49.95 for it.

      --
      I browse on +1 so AC's need not respond, I won't see it.
    9. Re:Uh, wouldn't we WANT a new netscape? by sumdumass · · Score: 1, Informative

      Well lets see what netscape introduced when you had to pay for both IE and Netscape (for microsoft browsers, you had to buy the plus addon until the first OEM service release and then some one who upgraded or bought the retail version still couldn't get it free).

        Frames, java support, java script support, Plugins, WYSIWYG html editor (wich microsoft still doesn't offer a free one), support for underlining, multi collored tables, font faces, spaces(spacer) were just a few that Netscape was first with. Also Netscape was first to offer voice chat over web/internet with thier cool talk and arguably internet phone with the watchdog utility that listened for incoming voice comunications.

      This is just a small list of all the stuff known to be a first in netscape. I guess a better question is what inovations did we miss out on because netscape was crushed? I mean, What would have apeared or developed maturity faster if they were competing all along the way? How much sooner would we have had a viable internet phone, tabbed browsing, browsers that can pass the acid test? A prime example of what has stoped being developed once microsoft was able to beat the pants off netscape by destroying thier business model and forcing them to give the browser away (to remain competitive) and refocus thier stratigy.

      Or maybe another question might be, what are we going to lose out on when microsoft not only controls the spyware but the removers. Will/could there be a day when the OS sells advertising with preinstalled spyware and the only way to get rid of it is to pay them even more money? Maybe it would be subscription based like thier new music service were you rent freedom from popups for so much a year and they return if you don't continue to pay. Thier WMP phoneing home already gives them a big database on music and videos you are likley to watch so why not try selling them to you.

    10. Re:Uh, wouldn't we WANT a new netscape? by MechaStreisand · · Score: 1

      I am delighted that you didn't say "that begs the question". Delighted.

      --
      Disclaimer: IANAL. This post is, however, legal advice, and creates an attorney-client relationship.
    11. Re:Uh, wouldn't we WANT a new netscape? by Ohreally_factor · · Score: 1

      I've got a question that is sort of related and sort of OT.

      How much of the original netscape codebase was passed thru to firefox? How much was retained by early mozilla releases? I vaguely remember reading, back in the day, that netscape was such a mess of spaghetti that they basically had to start over in a lot of areas.

      --
      It's not offtopic, dumbass. It's orthogonal.
    12. Re:Uh, wouldn't we WANT a new netscape? by metamatic · · Score: 1

      I heard about how bad the Netscape codebase was from a guy who left the company. Mozilla was basically an almost total ground-up rewrite.

      Netscape had arrogantly ignored standards and built a "tag soup" parser, then hacked in arbitrary features without regard for long-term supportability, and incompatibly with the standards. They ended up with a codebase that wouldn't let them actually implement web standards properly, once it became clear that they had to in order to compete with Microsoft.

      Frankly, Netscape deserved to die. You don't win against Microsoft by playing proprietary feature war.

      --
      GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
    13. Re:Uh, wouldn't we WANT a new netscape? by stm2 · · Score: 1

      How did he find out? For most people I know (outside geek circles) "Internet is the blue icon with the E".

      --
      DNA in your Linux: DNALinux
  4. Or You Could Pull a Netscape... by WeAzElMaN · · Score: 2, Insightful

    ...And Open-Source the program. Think of the possibilities.

    1. Re:Or You Could Pull a Netscape... by Cheapy · · Score: 1

      I'm trying to think of those possibilities...but they aren't coming.

      --
      Would you kindly mod me +1 insightful?
    2. Re:Or You Could Pull a Netscape... by Anonymous Coward · · Score: 0

      Oh they're coming, but they aren't necessarily good.

    3. Re:Or You Could Pull a Netscape... by Anonymous Coward · · Score: 0

      I don't think putting an open source anti-spyware app will benefit it much, on the contrary, I think it could hurt a lot, since you can study the method the program uses to search for the spyware/adware and find a way to hide your malicous code. Keeping this kind of code secret is very important to the company IMHO.

    4. Re:Or You Could Pull a Netscape... by Anonymous Coward · · Score: 0

      -bankruptcy
      -Ridicule

      Can't think of anything else right now.

  5. netscape products by gEvil+(beta) · · Score: 4, Interesting

    At the time of the IE/Netscape war, Navigator wasn't the only product that Netscape made. They also had a variety of server software, which from what I've heard wasn't all that bad, especially compared to the competition at the time. So saying Webroot should make other products in order to avoid the same fate as Netscape may not be particularly good advice. Depends on what other areas they branch into, I guess.

    --
    This guy's the limit!
    1. Re:netscape products by NutscrapeSucks · · Score: 4, Informative

      Yes, it's often forgotten that Netscape was founded to be an enterprise server software company, and got into selling shrinkwrap browser software by accident.

      As for Netscape's server products, the webserver was undercut by Apache, and the other stuff (groupware, application server) didn't sell well compared to IBM or Microsoft. Had they been successful with servers, Netscape would probably still be around today.

      As for this anti-spyware company, it reminds me about Quarterdeck's bitching when Microsoft took the outragous step of adding a memory manager to their OS.

      --
      Whenever I hear the word 'Innovation', I reach for my pistol.
    2. Re:netscape products by DarkShadeChaos · · Score: 1

      Yeah, I agree with parent to a point. But my personal take is this: if you only make one product, but make it exceptionally well then what's the problem? I think this could be a 'risky' approach; but if nothing else, I believe this would drive them to make a best product possible. Just my 2 cents.

      --
      The machine unmakes the man. Now that the machine is so perfect, the engineer is nobody. -Ralph Waldo Emerson
    3. Re:netscape products by deathy_epl+ccs · · Score: 1

      it reminds me about Quarterdeck's bitching when Microsoft took the outragous step of adding a memory manager to their OS.

      Of course, that was before Microsoft went through the whole anti-competitive thing they're still trying to wriggle out of. The environment for them is a lot different these days than it was back then.

      To be fair, though, Quarterdeck's complaint had less credence than the anti-spyware complaint (though I should point out I am not saying one way or the other how I feel about the actual validity of the current complaint, only that it is more credible than some whinging on about an operating system vendor having the audacity to include a memory manager).

    4. Re:netscape products by sumdumass · · Score: 1

      Unless your being sarcastic, i might be mising something.

      Netscape was founded to sell browsers and the server part didn't come around until late '96 when they started playing around with server software for intranet/internet access. Then in 97 they released thier media streaming push software "Netcaster". It is rumored to be a direct responce to microsoft giving IE away in OEM release windows 95 starting sometime around august of '96. Well it was probably more in responce to the browser wars in general.

    5. Re:netscape products by NutscrapeSucks · · Score: 1
      According to the NY Times in 1995:
      The Netscape business plan is to give away so many copies of its "client" software for individual users that there will be an increasing demand for companies operating Web sites to purchase Netscape "server" software

      With a better reference, you could find Jim Clark himself saying this, and of course the IPO prospectus. I don't think Netscape had any intention to sell browser software until they realized that a lot of people wanted to pay for it.
      --
      Whenever I hear the word 'Innovation', I reach for my pistol.
    6. Re:netscape products by Anonymous Coward · · Score: 0

      As for this anti-spyware company, it reminds me about Quarterdeck's bitching when Microsoft took the outragous step of adding a memory manager to their OS.

      Personally, I prefer Quaterdeck's memory manager over Microsoft's. Unforunately, some of the more advanced features of QEMM don't work in virtualized environments.

    7. Re:netscape products by sumdumass · · Score: 1

      I knew there always was a free client avaqilible. There was always a pay version availible too. The company was founded in 94 mosaic and changed to netscape after a law suite but didn't have any server software untill around '96. So saying that it was founded to give it's client away to sell server software is a little disengenuous.

      The link you reference and almost all other webpages referencing it come from a time after netscap started. IE, they change thier tactics in respnce to something. I cannot find any reference to this until after MS starts giving it's IE away with windows 95 OEM. here is a reference to netscapes timeline. Notice that it says around 95 that IE was free but netscape wasn't. Thats because there was a charge for it. NOtice they release thier server software around actober 96. There were refernces to it before that date but it was beta software.

    8. Re:netscape products by NutscrapeSucks · · Score: 1

      The original release of Netscape 1.0 was freeware. Certain companies, such as the one I worked for, asked for a "supported" (payware) version and were turned down. Enough people must have asked, because eventually there was a "1.1N" version that you could buy. But there was no revenue model around browsers in the very beginning. (And yes, IE was free/bundleware but it was a complete joke compared to Netscape until v3.)

      Also, according to this article, Netscape Server was introduced 12/94.
      http://www.entmag.com/archives/article.asp?Editori alsID=6373

      --
      Whenever I hear the word 'Innovation', I reach for my pistol.
  6. Who is teh best? by Anonymous Coward · · Score: 2, Insightful

    The taking of a second-best product in this space [i.e. Vista's Defender, f.k.a. AntiSpyware]
    So, they're the bests and Vista Defender the 2? What about ad-aware, spybots...?
    Also, who knew before about this "Spy Sweeper"?

    1. Re:Who is teh best? by codename.matrix · · Score: 1

      very good question. I never heard about the app before. I know of ad-aware and spybot. Why would I want to buy any app if I get those for free. In my opinion this "Spy Sweeper" app is in no way like netscape. They are more like an opera - but without the mobile market.

    2. Re:Who is teh best? by Cheapy · · Score: 1

      I do. It isn't that bad.

      --
      Would you kindly mod me +1 insightful?
    3. Re:Who is teh best? by Anonymous Coward · · Score: 0

      Have you actually tried to use Adaware and Spybot to defend and or clean up a machine?

      You will find you have to resort to other tools as well.

    4. Re:Who is teh best? by Unknown_monkey · · Score: 2, Informative

      I work in CompUSA, Spy Sweeper is one of the top selling anti-spyware programs. And they offer "Internet Essentials" which is a combo of anti popup, anti-spyware, spam shredder, and windows reg cleaner.
      "You've never heard of a program" does not directly relate to "Value"
      You've probably never heard of ETAP but it's one of the best programs for circuit analysis in utilities.

    5. Re:Who is teh best? by kv9 · · Score: 1
      You've probably never heard of ETAP but it's one of the best programs for circuit analysis in utilities.

      how can you compare a program that works with something so many people come in contact with (spyware) with a program that works with something so very *few* people come in contact with (circuit analysis)?

      your `top selling' argument might have some validity to it, but i still think more people know about spybot/ad-aware

    6. Re:Who is teh best? by Prosthetic_Lips · · Score: 1

      Pffft! I know about this program, it is not even CLOSE to "the best" spyware finder out there. It is bug-ridden and doesn't find as much as the other two leaders (Ad-Aware and Spybot Search and Destroy).

      I have a friend who bought it simply because it was recommended at Best Buy. He uninstalled it and threw it out because of the problems he had with it. If Best Buy didn't push it as "the best" (I think it is like a store-brand), it would have died a long time ago.

      I rank it up there with Packard Bell computers -- if you know someone who has it, you know to stay away from it. Sorry if some of you are big Packard Bell fans, but the few people that I knew that got a PB computer were very disappointed.

    7. Re:Who is teh best? by tourettes · · Score: 1

      At a tech shop i work at, Webroot's Spy Sweeper is pretty much the ONLY spysweeper we sell. From my experiences with comparing it to other software like Ad-Aware, Spybot, Defender and Panda Software's on-line scanner, Spy Sweeper picks up the most. Second would probably be Ad-Aware.

      Btw, Norton 2006 with their bundled Anti-spyware is pure junk for anti-spyware.

      --
      tourettes
    8. Re:Who is teh best? by Necrolin · · Score: 1

      I heard a lot of good things about this program so I gave it a try a while back. I honestly didn't like the results that I saw when using it to clean an infected PC. Having run a PC fix it shop of my own for some time I still prefer tools like Spybot and Ad-Aware, among other really good programs out there. Too bad that Microsoft bought Giant, that was a great spyware scanner too.

    9. Re:Who is teh best? by ajpr · · Score: 1

      Yeah the bext way I've found is to use a combination of free scanners.

    10. Re:Who is teh best? by mrchaotica · · Score: 1
      I work in CompUSA, Spy Sweeper is one of the top selling anti-spyware programs.
      And that's the key, ladies and gentlemen. "Obviously" Ad-Aware and SpyBot don't count because they're free (and free stuff always sucks).
      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    11. Re:Who is teh best? by Unknown_monkey · · Score: 1

      It's interesting that the PBell fanboys didn't turn out in droves for this one.....

    12. Re:Who is teh best? by disasm · · Score: 1

      I'm a computer repair/consultant in central Pennsylvania. I have come across Spy Sweeper on tons of computers, and most customers are complaining about it. All of them were told they needed it by Best Buy, and it got removed from all their computers, had spybot, ad-aware and clamwin (or AVG if they weren't commercial and they needed live scanning). From what I've seen, it is one of the most annoying worse spyware scanning programs, because it bothers the consumer so much, that they hit OK, the same way they get things installed. If I were you, I'd stay as far away from this product as possible!!! Sam

    13. Re:Who is teh best? by Anonymous Coward · · Score: 0

      Of course. Because I can never remember the website for Spybot when I need to use it on a friend or relatives computer. However if Joe customer goes into a store and picks up a copy of a spyware removal program off the shelf then he didn't need to use Google to search for it did he?

  7. You joke, but that's a good idea. by khasim · · Score: 1

    A bootable CD that cleans up the spyware/virus crap. This is particularly important with the rootkits showing up for Windows.

    It's easy to clean a Linux box (if you should ever get infected). But it is extremely difficult to clean a Windows box.

    1. Re:You joke, but that's a good idea. by Rix · · Score: 0

      It's easy to clean a Linux box (if you should ever get infected).

      No, it isn't. Do you have an md5 for all of your binaries? It could be hiding in any of them, ready to reinfest as soon as you run something as innocent as "ps".

    2. Re:You joke, but that's a good idea. by croddy · · Score: 2, Informative
      No, it isn't. Do you have an md5 for all of your binaries?

      Package: debsums
      Description: Verify installed package files against MD5 checksums.
      debsums can verify the integrity of installed package files against
      MD5 checksums installed by the package, or generated from a .deb
      archive.
      Tag: devel::packaging, security::integrity, suite::debian
    3. Re:You joke, but that's a good idea. by drsmithy · · Score: 3, Insightful
      It's easy to clean a Linux box (if you should ever get infected). But it is extremely difficult to clean a Windows box.

      Just like it's "easy" to be a heart surgeon but "extremely difficult" to be a brain surgeon...

    4. Re:You joke, but that's a good idea. by Ohreally_factor · · Score: 1

      So, what would a Mac user be? A tree surgeon?

      --
      It's not offtopic, dumbass. It's orthogonal.
    5. Re:You joke, but that's a good idea. by ggy · · Score: 1

      Duh, Fruit Surgeon!

  8. Is that the right way to look at it? by penguin_asylum · · Score: 5, Interesting

    I often see it the other way around...

    If I'm looking for a good anti-spyware program, and it comes bundled with something that I'm _not_ looking for, then I might instead use something that's not necessarily quite as good but isn't loaded down with other software.

    If their software is that much better than Microsoft's, then I'm sure they'll have no problem competing. Honestly most people install spyware without looking at what they're agreeing to, and the people who care about this will be willing to spend the time it takes to install a third party app.

    1. Re:Is that the right way to look at it? by DrLZRDMN · · Score: 1

      Yep. The only posibility of MS winning this one is if they're program works flawlessly, which it won't.

    2. Re:Is that the right way to look at it? by TheShadowzero · · Score: 0
      "...if they're program works flawlessly, which it won't."
      Which it doesn't. As of now, and the beta version anyway. On my Windows box, I ran Windows Defender two or three times and then ran Ad-Aware SE Personal. WD didn't pick up anything. Ad-Aware picked up 60 Critical and 100 or so minor risk things. Let's hope they make WinDefender (and Vista, for that matter) more secure than it is now, at least for the sake of those people that trust in Microsoft's bundled software (IE adamants, etc.)
      --
      If history repeats itself, why can't we study the future?
    3. Re:Is that the right way to look at it? by evilneko · · Score: 0

      How did you, as a slashdotter and presumably a relatively computer-savvy geek, end up with spyware? Deliberate infection in the name of testing? Or was it just Ad-Aware fud?

      --
      Slashdot - where to disagree, is to be a troll
    4. Re:Is that the right way to look at it? by Bios_Hakr · · Score: 1

      An excellent example would be the defrag tools. Win2k and WinXp both have a defrag tool built right in. However, a lot of people still go out and grab Diskkeeper. Why? Because DK is marginally better than the built in tool.

      There are a ton of people that bought and installed McAafe and Norton AV tools. They just figure that the more AV they have, the better.

      Also look at spyware tools. Most geeks recommend running at least two tools. Spybot and AdAware seem to be the most popular. MS adding AV or anti-spyware won't hurt these companies too bad.

      Additionally, what happend when Dell, Compaq, and Sony decide to bundle some Spyware with their distro? Will they force MS to whitelist the app? Will they disable or break the anti-spyware?

      I can just imagine the hijinks when your brand new computer informs you that you have spyware before you even connect it to the Internet.

      --
      I'd rather you do it wrong, than for me to have to do it at all.
    5. Re:Is that the right way to look at it? by Bios_Hakr · · Score: 2, Informative

      A lot of those "critical" flags are not, well, critical. Both progs seem to flag cookies as Spyware. Now, an open cookie might be bad, but it is not what I'm looking for when I run SpyBot.

      Furthermore, AdAware has a really nasty habit. I run it, clean the system, and reboot. When I run it agian, it finds more problems. No matter how many times I run this, it'll still find a few "critical" spyware problems.

      Just to test, I installed VMware and WinXP with SP2. I used the Autopatcher program to ensure the system was good to go. In installed AdAware and ran it with definitions I downloaded and manually coppied to the partition.

      On a fresh install with zero connection to the internet, I found several hundred "critical" problems. I ren the tool 3 times to let it clean the partition. Then I rebooted. After the system came back up, it found 20 more "critical" problems.

      My point? 90% of what anti-Spyware and anti-virus tools do is a complete scam.

      Install and patch XP. Install and update Firefox. Install Adblock and the Filterset.G rules. You'll be 99% protected from any problems. If you surf pr0n a lot, use a Knoppix LiveCD for that. If you download warez, then use VMware or VirtualPC to test things out first.

      --
      I'd rather you do it wrong, than for me to have to do it at all.
    6. Re:Is that the right way to look at it? by TheShadowzero · · Score: 1


      Furthermore, AdAware has a really nasty habit. I run it, clean the system, and reboot. When I run it agian, it finds more problems. No matter how many times I run this, it'll still find a few "critical" spyware problems.


      While this is true, I ran it again and it found only 3 or 4 things. There was definately malware on the computer, whether it was truly critical or not.
      --
      If history repeats itself, why can't we study the future?
    7. Re:Is that the right way to look at it? by DrLZRDMN · · Score: 1

      I know this is a troll, but the truth is, I don't. I use GNU/Linux. I'm just stating my opinion.

    8. Re:Is that the right way to look at it? by setirw · · Score: 1

      Unless, Noah, users are unaware of other 3rd party superior applications, or else simply too lazy to install them. Windows Disk Defragmenter comes to mind first, IE second.

      --
      This message printed on 100% post-consumer recycled electrons.
  9. They can't be another Netscape by ebcdic · · Score: 1, Informative

    ... because nobody's ever heard of them.

    1. Re:They can't be another Netscape by DrLZRDMN · · Score: 1

      Parent does have a point.
      Netscape did something, anti-spyware software just fixes MS's mistakes.

      There is a differnce.

  10. Anti-spyware should not be considered a feature by DrLZRDMN · · Score: 2, Insightful

    Seriously.
    Why can't MS just make an OS which isn't so prone to it?
    If they somehow made Vista impervious (without a built in addon or tool) do you think people would be mad at them for killing the competition?

    Microsoft steals the lucrative business of fixing Microsofts mistakes. Spyware manufacturers also make money off of Microsofts mistakes.
    Just some food for thought.

    1. Re:Anti-spyware should not be considered a feature by Mahou · · Score: 1

      microsoft steals business? if you catch a cold and don't go to the doctor you're not stealing the doctor's business.

      --
      if i'm not immortal, what's the point of living?
      ...te?
    2. Re:Anti-spyware should not be considered a feature by Tx · · Score: 5, Insightful

      Oh, come on. I hate it when people make me defend Microsoft, but the fact is a lot of spyware is installed manually by users, via a bundle with some other product, and there is no way Microsofts OS can differentiate between user-installed spyware and legitimate apps.

      So yeah, Microsoft is at fault for the security holes that allow spyware to be automatically installed, but factor those out and there's still a need for anti-spyware for the computer-illiterate masses.

      --
      Oh no... it's the future.
    3. Re:Anti-spyware should not be considered a feature by Godji · · Score: 1

      Technically you're right... technically. In the mind of Joe User, however, spyware is something that Just Exists (TM), just like human diseases*, and is not dependant on the underlying OS. (After all, what is the difference between an operating system and a processor?!) In Joe's view of the IT world, the logical and only way to fight spyware is with an anti-spyware program.

      Assume, for the sake of argument, that MS released a spyware-proof uber-secure OS. They'd be more than happy to proclaim it: "Better security! No more spyware! Ever!". And there'd be Joe User, plagued by spyware for years and used to it saying to him/her/itself: "Yeah, right - that's what they said last time on the XP setup screen! I'm not going to believe them. I know I need an anti-spyware solution."

      Two months ago I installed Linux on a machine at home. One person kept asking me if I were sure that nothing bad could happen, or if he should install anti-virus/anti-spyware anyway, just to feel more secure.

      * What I've said above is exactly the reason why the "virus" analogy of malware to human diseases is pushed too far. You can't make a human immune to a disease (yet) without drugs. You can improve an OS significantly.

    4. Re:Anti-spyware should not be considered a feature by Anonymous Coward · · Score: 0

      So how about programs that edit the registry, install unknown device drivers, or make changes to the disk?

      Oh wait, that would stop every single program from installing.

      I know, make it bypassable by being logged in as an administrator!

      Of course everybody will spend most of their time logged in as a normal user...

    5. Re:Anti-spyware should not be considered a feature by Anonymous Coward · · Score: 0

      You should install calm or fprot on that linux box, because of the reason your missing.

      There are lots of people making malware for Windows, because windows is popular and vulenrable. Linux, good as it may be, isn't perfect. People, smarter people than those writting malware for Windoes, do write malware for Linux. Remember the reason why the Titanic sunk was because everyone thought it to be unsinkable.

    6. Re:Anti-spyware should not be considered a feature by krunk4ever · · Score: 1

      that's because the human already has an awesome anti-disease system installed. it's called the immune system. Windows' immune system is very lacking and that's why we needed external systems like antivirus and antispyware to help us fight off diseases.

    7. Re:Anti-spyware should not be considered a feature by Mistshadow2k4 · · Score: 0, Redundant

      This is true, but is also true that a great deal of spyware installs itself into a user's machine while they're online without their knowledge or consent. That is a flaw in the operating system, that its default settings are to allow others to remotely make changes to your system without your knowledge or consent -- and you can't change this without third-party software and/or a hardware router, which even when combined are not 100% effective. People who know enough to use a firewall and something like Win Patrol have no idea how bad it is out there for a machine running without these; you don't even have to go to any site and spyware is downloading itself straight into your computer immediately.

      But is automatic protection and education needed for average users? Hell yeah. I just finished fixing up on a computer in which the neighbor's kid installed something that was absolutely loaded with spyware. What's funny is that the kid is taking a computer class in school! I wonder what they're teaching in that class, how to play WoW? Christ. Anyway, my point in this paragraph is that we obviously can't count even on regular schools to teach the next generation even the slightest thing about computer security, so this problem isn't going away any time soon. We really need to try harder to educate people about spyware.

      Lastly, I'd like to add that this is part of why I recommend Xandros to computer newbies. Explaining the difference between root and a regular user account and pointing them towards the Xandros forums is a hell of a lot easier than teaching a novice Windows user how to secure their machines. I've done both more than once. That "Windows is so much easier to use" is a load of BS, I think (whether you regard this as a flame or not). It may seem easier to use, but that's an illusion that lasts only for a short time -- just long enough for the machine to get infected with a boatload of malware because the user simply doesn't know any better and security has always way down on the list for MS.

      --
      I dream of a better world... one in which chickens can cross roads without their motives being questioned.
    8. Re:Anti-spyware should not be considered a feature by NutscrapeSucks · · Score: 1

      How does "the principle of least authority" allow for "good spyware" like the Google Toolbar, but not the "bad spyware" everyone hates?

      Most Spyware isn't doing anything special on a system level, it's a judgement call based on the desirability of the software.

      --
      Whenever I hear the word 'Innovation', I reach for my pistol.
    9. Re:Anti-spyware should not be considered a feature by CastrTroy · · Score: 1

      With schools cutting core subjects like Art and just to cut costs can we really expect them to offer education in computer security. Especially when most teachers have no idea about computer security themselves. Schools should just stick to the basics and not worry about teaching "Computer security". It's not even computer security we're talking about, it's basic computer usage. We don't call locking your car door, car security system management. I think the problem is, is that people refuse how to properly use computers. People who refuse to learn how to learn how to use a computer, will be bad off, just as those who refuse to learn to drive and maintain their car will always have problems getting into accidents, and having their car break down, because they didn't realize there was a problem until it was too late.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    10. Re:Anti-spyware should not be considered a feature by CastrTroy · · Score: 1

      But it's the same as computer disease. People who are lazy and don't look after their health will (most likely) encounter more diseases in their life. People who eat healthy, exercise regularly, and follow other health guidelines such as hygeine will have far fewer diseases. It's the same way with computer viruses/malware. Proper behaviour before you get the disease can stop you from getting the disease in the first place. Sure you could still get a disease following all the guidelines, but you have a reduced risk. This is the same reason insurance companies charge you less if you maintain a healthy lifestyle. There's less of a chance they'll have to pay out.

      --

      Anthropic principle: We see the universe the way it is because if it were different we would not be here to see it.
    11. Re:Anti-spyware should not be considered a feature by fastgood · · Score: 1
      Microsoft steals the lucrative business of fixing Microsofts mistakes.

      Look back to a year after Windows 3.1 and you see Microsoft putting out DOS 6.x with competitors' applications.
      (the fifth version of anything is usually when it jumps the shark, anyway)

      MSAV was a crude antivirus, MEMMAKER was a crummy QEMM, and DOUBLESPACE was a crappy Stacker.
      But nobody said you ever had to produce a better product (as long as its copied and free) to kill the competition.

      * "MS-DOS 6.0 had been released following competition from Digital Research"

    12. Re:Anti-spyware should not be considered a feature by Godji · · Score: 1

      Remember the reason why the Titanic sunk was because everyone thought it to be unsinkable.

      No. Titanic sank because it was not open-source.

    13. Re:Anti-spyware should not be considered a feature by drsmithy · · Score: 1
      Even assuming that is true, it is still possible to design an OS where legitimate software works and spyware doesn't. It's called the principle of least authority.

      So how do you propose to identify what code is "spyware" and what code isn't so you can actually apply that principle (not to mention, what "authority" do you think spyware needs that non-spyware doesn't) ?

    14. Re:Anti-spyware should not be considered a feature by drsmithy · · Score: 1
      Why can't MS just make an OS which isn't so prone to it?

      Because they can't control who their end users are.

      Spyware manufacturers also make money off of Microsofts mistakes.

      Spyware manufacturers pretty much all make money off of *user's* mistakes.

    15. Re:Anti-spyware should not be considered a feature by Godji · · Score: 1

      The human immune system is good, but diseases adapt to it, just as computer threats adapt to the security provisions of the system attacked. The difference is that we need these external medicines because evolution is slow and will not adapt adequately to new threats. In addition it will advance future, but the specific individual will hardly change. A computer can change very quickly and easily, and changes can be applied to an existing functioning system. Humans cannot have their software reinstalled or their data backed-up (yet). These are the fundamental differences.

      My point was that this overused analogy installs the wrong idea in Joe User

    16. Re:Anti-spyware should not be considered a feature by kz45 · · Score: 1

      Seriously.
      Why can't MS just make an OS which isn't so prone to it?
      If they somehow made Vista impervious (without a built in addon or tool) do you think people would be mad at them for killing the competition?


      because it's impossible, unless you get rid of all the dumbass users that install malware-ridden programs or sue the malware creators out of existance.

      Even if they had system-file protection in place with user accounts (similar to the *nix form of security), a spyware program can still be created.

      As long as it is still profitable, spyware will always exist (in one form or another).

    17. Re:Anti-spyware should not be considered a feature by jawtheshark · · Score: 1
      You can't make a human immune to a disease (yet) without drugs.

      I think you should read up a bit on immunity. There are absolutely no drugs required to become immune to a disease. The only thing that is required is that you are exposed to the disease and that your body starts to build antibodies to it. (Note that you don't have to become ill to do this!) Sometimes those antibodies are "stored" for the rest of your life. You might know these diseases as "childhood diseases". You usually never get Measels twice for example.
      Of course, you cannot acquire immunity to all diseases and that is why we require drugs. Perhaps you thought of "vaccination", which essentially is the equivalent of being exposed artificially to a disease in order to build up an immunity.

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    18. Re:Anti-spyware should not be considered a feature by Tim+C · · Score: 1

      How will that help? So I download and install a program, and it tries to access the network. Windows pops up a dialogue warning about it, asking whether or not I should grant it permission.

      So I click "yes", as obviously, it can't fetch the weather report/news headlines/stock ticker/whatever without it.

      Oops, it was a trojan, and now I'm part of a zombie network.

      How is the principle of least authority supposed to prevent that sort of thing?

      In other words, how is it supposed to be determine what is legitimate network access (or whatever) and what is not, other than by asking the user? (And as it was the user who installed it in the first place, how on earth would that help?)

    19. Re:Anti-spyware should not be considered a feature by Godji · · Score: 1

      I understand and agree with you. This is my own late-night carelessness: What I should say there is "You can't make a human automatically immune to all diseases possible, without some (unknown) drug." You can, however, have a practically, not theoretically, immune Linux system.

    20. Re:Anti-spyware should not be considered a feature by mwvdlee · · Score: 1

      Yes and No.

      Yes, it's the user that (unknowingly) installs malware.

      No, it's the OS that allows malware to install in suchs ways that it cannot be easily uninstalled.

      Wouldn't it be possible to have the OS manage installations, and thus, manage complete uninstalling? The only "drawback" I see is that gray-area "legal" DRMware such as Sony's infamous rootkit wouldn't work either.

      --
      Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
    21. Re:Anti-spyware should not be considered a feature by NewWorldDan · · Score: 1

      Wouldn't it be possible to have the OS manage installations, and thus, manage complete uninstalling?

      Oh, would that this were the case. Unfortunately, the OS in no way even remotely works that way, although I have, in the past, argued that it should. It would require a fundamental shift in both the OS and the thinking in Redmond. Software needs to be encapsulated. It needs to become fundamentally impossible for programs to alter the underlying OS or for them to alter any other program on the system. Unfortunately, this pretty much breaks legacy compatibility. So then you have to have another layer for legacy type programs where they can run wild but can only destroy the legacy layer/sandbox. Sort've like the WoW layer for running 16-bit programs.

    22. Re:Anti-spyware should not be considered a feature by Anonymous Coward · · Score: 0

      I read your journal. You are an absolute moron. You go on a rant and can't even identify what you are ranting against. And have you ever heard of the key?

    23. Re:Anti-spyware should not be considered a feature by Mahou · · Score: 0, Flamebait

      i'm going to kill you in your sleep, rawr.
      the key? the key of the twilight? what are you talking about you insane person.

      p.s. my rant was talking about idiocy in general.

      --
      if i'm not immortal, what's the point of living?
      ...te?
  11. no offense by joshetc · · Score: 0

    But thats kinda the risk you have to take being a software company that secures windows machines. They are banking on someone making mistakes in their software, now the company making the mistakes is attempting to fix some of them / release a program that follows everything going on to fix them on-the-fly. I believe Netscape in a way was much less deserving than Webroot.

    Also keep in mind that Netscape's product sucked while Spy Sweeper is fairly good at what it does. I think for at least the next few years, even if Windows Defender is good that Webroot will still be around. People would probably be less willing to pay for their software though...

    1. Re:no offense by oztiks · · Score: 1

      But thats kinda the risk you have to take being a software company that secures windows machines.



      oh no no no no no, let me rephrase that for you ...

      But thats kinda the risk you have to take being a software company that writes applications windows machines.



      Such things taint the ability to innovate with PCs.
  12. Yup by mfh · · Score: 1

    It's called Linux.

    --
    The dangers of knowledge trigger emotional distress in human beings.
    1. Re:Yup by Anonymous Coward · · Score: 0

      Captain Obvious strikes again!

  13. This is NOT the next Netscape... by jerkychew · · Score: 5, Insightful

    Netscape was a competitor to a product Microsoft sold. Anti-spyware software is little more than a fix for Microsoft's crappy security model that's included in its OS and default browser. There's a big difference here.

    Microsoft bundled IE and bullied PC makers into not putting Netscape on the desktop because it wanted to put Netscape out of business. That's a bad thing. On the other hand, Microsoft is bundling anti-spyware software into its new OS to protect its users from a) their own ineptidude, and b)the afore-mentioned crappy software that Microsoft themselves put in place.

    Where Microsoft wanted to get into a new market (the browser application) by crushing Netscape, in this case they're just trying to band-aid their operating system's vulnerabilities to (hopefully) lower the amount of user frustration in the future.

    I've been an IT guy for nine years, and I've always thanked Microsoft for releasing bad, buggy code. The anti-spyware folks should do the same, instead of being angry that Microsoft is finally trying to fix the problem.

    1. Re:This is NOT the next Netscape... by DrLZRDMN · · Score: 4, Interesting

      Exactly!
      An anti-spyware company suing MS for getting their act together would be the same as a spyware company suing MS.

    2. Re:This is NOT the next Netscape... by 0racle · · Score: 1

      Yes you're right, it's all Microsoft's fault that users click 'Yes' to every dialog box that pops up.

      A lot of spyware did not install itself, the user purposely installed it. Users need more protection from themselves then they need protection from anything else.

      --
      "I use a Mac because I'm just better than you are."
    3. Re:This is NOT the next Netscape... by cgenman · · Score: 1

      Company A sells a product that is lacking in a certain area. Company B sells product that helps remedy the problem. Company A eventually gets their act together and fixes their product, rendering Company B unnecessary.

      It's an age-old equation. If you're fixing someone else's product, make what you can and expect to get out of the market when the product gets fixed. Because it will happen eventually.

      MS is just doing what Apple started years ago: looking at ways in which users fix their OS and making those updates standard.

    4. Re:This is NOT the next Netscape... by Anonymous Coward · · Score: 0

      Anti-spyware software is little more than a fix for Microsoft's crappy security model that's included in its OS and default browser.

      The problem is that microsoft isn't fixing their crappy security model, they're releasing the same "fix" for it as all the other companies were. Except for free. And bundled with the OS.

    5. Re:This is NOT the next Netscape... by drsmithy · · Score: 1
      Netscape was a competitor to a product Microsoft sold.

      No, they weren't. Neither IIS nor Internet Explorer were ever "sold".

      Anti-spyware software is little more than a fix for Microsoft's crappy security model that's included in its OS and default browser.

      No, anti-spyware software is there to prevent and repair end user mistakes, same as anti-virus software.

      OS-level security cannot protect you against 99% of the things spyware does (nor viruses).

    6. Re:This is NOT the next Netscape... by Anonymous Coward · · Score: 0

      > Netscape was a competitor to a product Microsoft sold.

      No.

      1) Netscape was providing products, such as web servers and clients long before Microsoft even noticed there was an internet.

      2) Microsoft was and is quite adamant that IE was _never_ "sold". If it had been then they would have had to pay some money to Spyglass who had developed it for MS on the basis that they would get a few dollars for every copy _sold_.

      So MS saved a few million dollars and drove Spyglass broke so that it could not provide internet clients to anyone else. The game is played by screwing your 'partners' and suppliers as they help you screw the competition.

    7. Re:This is NOT the next Netscape... by Anonymous Coward · · Score: 0

      While I loved Netscape when it first came out, by the time IE 4 hit the market, it just looked better.

      That's what killed netscape for me.
      I used IE for several years up to version 6.0 until I found Firefox (b4 that was phoenix & firebird, etc...)

      My cousin who does Web development/design for a living always uses IE, because truth be told, as virii/spyware/adware/malware laden as it is, it still looks better. At a cost of course.
      plus, his dumbass doesn't know how to use PHP (he knows ASP and flash)

  14. Go to bed with the dogs... by Anonymous Coward · · Score: 4, Interesting

    ..wake up with fleas. If you develop for, around, close to, in addition to, anything that micrsoft makes, and THEY aren't making the cash from it..good luck, you are sleeping with the dogs and taking a big chance, and I would include such offerings as FF for windows, a thoroughly misguided and ill advised effort, albeit some of them are well meaning. They are still naieve from the long haul view of things and will one day seriously regret what they are doing to make MS "better". All you are doing is giving MS breathing room as they further consolidate and corrupt things, and they WILL screw you over in the long run somehow.

  15. They are correct though by moore.dustin · · Score: 2, Insightful
    If they do not offer something that is both wanted by users and not included with Vista, they will be the next Netscape. A VAST majority of people are average computer users that would never seek a service they have already with the OS. Most would just assume the Windows one works and why use another one?

    But if can include both better and different services to appeal to customers, they will have a chance. Having a better product alone will not be enough though. Look how dominate IE still is even though it is pretty well known that Firefox is much better. Users just do not bother to care because they just dont know better.

    A chance only though, my money is on Vista to begin with - Who knows what problems Vista will open up for other companies to try to fix.

    1. Re:They are correct though by jftitan · · Score: 1

      This same logic can also be applied to the built in Windows Firewall especially since SP2 release for XP.

      Prior to Windows XP SP2, people were concerned about firewall protection either through hardware (routers, NAT/PAT, etc), or software (Norton, McAfee, ZoneAlarm, etc). By this they kept thinking oh the built in Windows Firewall was never activated by default, or too complicated to configure/setup, so people went out and purchased 3rd party software and/or hardware.

      Since SP2 released for XP, many people dumped the 3rd party firewall software because Windows indicated that its own built in firewall was working. This also lead to the crippling of third party software like Norton IS, which then required a special download WMI applet to allow NIS to communicate with Windows.

      This was inconvenancing to most, thus people took the easy route and started using the built in firewall. Same situation applies for anti-spyware. Since MS Anti-Spyware (now Defender), is going to be included into Vista, then who needs a outside program doing the same task.

        I know I teach my clients to understand that if they have more than one product installed doing the same repetitive task, then they could possibly cause more harm than good. AV are a great example, including AS software.

      People will take the easy road. use what is already installed until it proves to be useless. That what happened to windows firewall before SP2.

      --
      "Don't Forget to Salt the Fries"
  16. In the security biz, there's always room by Opportunist · · Score: 4, Insightful

    You can't simply compare the anti-malware market to others.

    With browsers, you want to be compatible. You have a self perpetuating cycle where your browser wants to be compatible to the pages where the page creators want to be compatible with your browser. Thus the widest used browser is the most compatible, and thus "the best" if you want to be able to view everything "well".

    The same applies to media players, MP3 players and everything else where all sides involved want to be as compatible as possible.

    In the anti-malware biz, it's exactly the other way. You do NOT want to be "compatible" with the malware.

    Take a look at antivirus soft and the corresponding trojans, viruses etc. There is almost no trojan today that does NOT try to disable Kaspersky, McAffee, NOD etc. Trying to tear down the WinXP firewall is a given.

    I bet my computer against an old ice cone that the FIRST thing that happens as soon as the Windows "Anti-Malware" comes out is that every trojan that could be disabled by it comes with some Anti-Anti-MS-Malware functions, just like they do now with Anti-WinXP Firewall functions.

    In other words, there will always be a market for "small" Anti-Malware businesses. For the simple reason that, as odd as it may sound, they will have a higher chance to succeed. Simply by being neglected by the trojan writers.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    1. Re:In the security biz, there's always room by TheShadowzero · · Score: 0
      Trying to tear down the WinXP firewall is a given.
      I agree wholeheartedly. Is it just me, or have you noticed that all the legitimate apps are questioned by the Windows firewall but all spyware gets through? I have downloaded legitimate games that the firewall "caught" and questioned me about, and yet when I purposely installed spyware through a warez site, clicking "Yes I agree to install", Windows didn't even recognize that the malware was installed.
      --
      If history repeats itself, why can't we study the future?
    2. Re:In the security biz, there's always room by noidentity · · Score: 1

      "In other words, there will always be a market for "small" Anti-Malware businesses. For the simple reason that, as odd as it may sound, they will have a higher chance to succeed. Simply by being neglected by the trojan writers."

      I hear one company is having success with their product called "Mac OS X", which has a small market share <ducks>

    3. Re:In the security biz, there's always room by Opportunist · · Score: 1

      It might have/would have recognized the spyware, though spyware usually comes with routines that very explicitly target the WinXP firewall. Which is, and that should be said, not too hard to circumvent.

      There are actually 2 very common ways of disabling it. One, by writing the permissions explicitly into the Registry (yes, the WinXP Firewall is Registry-Key driven. Go figure...). The other one is to poll the opnened windows every few millisecs and "click" allow when the one that matters opens, before the user gets to see it.

      There is actually NO spyware worth its bits that could be stopped by a WinXP "firewall" while the user runs around in Admin mode.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    4. Re:In the security biz, there's always room by GotenXiao · · Score: 1

      There is but one flaw to your argument.

      Internet Explorer is the most widely used browser, as well as the least compatible.

      --
      Goten Xiao
    5. Re:In the security biz, there's always room by Opportunist · · Score: 1

      Least compatible to the W3C standard, yes.
      Least compatible to existing pages, no.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  17. Second best? by supremegeekoverlord · · Score: 2, Insightful

    Okay, I haven't been following the spyware world closely lately -- and it changes fast -- but IIRC, when MS bought the rights to this program from Giant, most of the reviews I had read put it as the best antispyware program on the market. Now granted, that is a very disputable claim, and I obviously offer no evidence to support it. Still, it seems like Webroot came the close second here, so they have a little more to worry about than Mr. Moll seems to display.

    --
    Genius is the art of making everyone think you know what you're talking about.
    1. Re:Second best? by nutrock69 · · Score: 1

      That may have been the case then, but it most certainly isn't now that MS owns it.

      I work in the PC support department of my company, and most of us also sell our PC support services to individuals who need help. For the spyware infestations, we always try the decent "free" products first. Then we try MS anti-spyware and it usually fails to find anything more. If spyware still exists after that, then we try Webroot Spy Sweeper which successfully cleans up whatever is left.

      Sometimes for giggles we actually try MS anti-spyware first, then Ad-aware (which catches quite a bit more than MS), then Spybot (which catches even more than Ad-aware). For spy-crippled systems, Spysweeper usually wipes the remainder just fine.

      For the record, we usually suggest Spy Sweeper first, but since the software costs money that usually adds to the bill. The sad state is that most people don't want to spend money unless it's a last resort. These are the same people that don't think even once before they click on a popup to install spyware. These are the same people who are going to think MS bundling anti-spyware tools will be "good enough" - that if it catches most of them they should still be ok.

    2. Re:Second best? by elyk · · Score: 1

      Exactly. I never used Giant, but I've noticed several feature reductions between m$as and defender. Take, for example, what it does if a program tries to add a startup entry. Antispyware (basically a rebranded giant) would give you a little alert in the corner asking what you want to do, with an option to remember that choice. Defender? It gives you a little "balloon tip" telling you that a change has been made. You must click on the balloon, which brings up the main defender screen. From there, you select your desired action from a dropdown menu, and click apply. You then must close the defender window before you can continue on what you were doing. Another point where I've noticed lower quality is in definition updates. Antispyware had new updates about once a week, usually every friday night. There was an option to manually check for updates. Defender delivers its updates through windows update. I've only gotten one update so far in the two months or so I've had it installed, and if there's a way to manually check, I couldn't find it. Leave it to microsoft to buy a product and make it worse.

      --
      MS-DOS: Most Severe Denial of Service
      Free Online Backup
    3. Re:Second best? by MadUndergrad · · Score: 1

      You think it's bad now, try using it on XP 64-bit. MS anti-spyware wouldn't even update, since it's apparently incompatible with my version of the operating system. I can understand that from third-party software, but this is ridiculous.

    4. Re:Second best? by elyk · · Score: 1

      In a way it is third-party. They didn't build it themselves from scratch; they've licensed an existing product and are now in charge of figuring out how to modify someone else's code to work properly with theirs.

      --
      MS-DOS: Most Severe Denial of Service
      Free Online Backup
    5. Re:Second best? by Anonymous Coward · · Score: 0

      In my line of work, I come up against crapware quite a bit and spy sweeper is a great antispyware product when it comes to cleaning up infected systems. If you leave it installed however, you should disable most of their "shields". In my experience only the install and communication shields are worth having on -- the others just bog down performance and produce annoying popups that most users have no clue how to respond to (leading to users calling ME -- never a good thing). Still, their ability to cleanup spyware is second-to-none from what I've seen and they seem to always win the magazine reviews. I've used the free products in the past and while they used to be "good enough", I no longer find them to be so - there are some things I found they just can't remove and other things which they don't even detect. My guess is it's difficult to keep definitions up-to-date and keep up with the evolving threats out there when you're not getting any money to hire people to do so.

  18. Nutscrape v. Internet Exploder by Tiro · · Score: 0
    When I saw the title of this article on RSS, I knew why Netscape was being compared to this product without any previous knowledge of the antispyware company.

    It is sad that a company is primarily remembered for losing to Microsoft.

  19. F$ck Spyware: Defend The United States by Anonymous Coward · · Score: 0



    Al-Qaeda Operations, how may I direct your
    trial, conviction, sentencing, of call.

    Thank for your donations.

    Kilgore Trout, M.D.

  20. Webroot Spysweeper the best? by reklusband · · Score: 5, Interesting

    I've been in the spyware removal (windows consulting) business basically since there was spyware to remove (restart computer into safe mode and clean out startups) and I've NEVER had a client who used spysweeper come back and tell me how great it was. Usually they'd say the program didn't do anything to prevent or remove their britney spears doggie porn popups/virus/adware melange. I'd install spybot S+D, spyware blaster, and have them run spybot weekly after I'd removed crap. The spybot/spyware blaster machines ALWAYS came back cleaner. Now I just make them get a copy of Symantec Antivirus 10.0.2 and after installing the innoculations from spybot and spyware blaster, setting the default actions for adware/trojans to delete, and making sure it updates everyday, I get machines from complete porn addicts who refuse to switch to firefox that only have 20 or so (very very minor) issues after 3-6 months as opposed to 20,000(literally) in one month. And for the record I normally HATE symantec products, but their pro (non norton) antivirus is the best I've used.

    1. Re:Webroot Spysweeper the best? by Xeriar · · Score: 1

      Ditto. Spyweeper has broken several of my customer's machines during abortive attempts at removing Spyware. That's not a particularly healthy means of 'fixing' Spyware problems.

    2. Re:Webroot Spysweeper the best? by FuckTheModerators · · Score: 1

      I'll second that regarding their home versions.

      Though I've been pretty impressed with their enterprise setup. As part of a two-man IT crew for a small company, our rollout of Webroot reduced our spyware removal duties quite a bit. I don't know how that scales, but it fits us perfectly.

      Not affiliated, not shilling, I just like their product. :)

    3. Re:Webroot Spysweeper the best? by Anonymous Coward · · Score: 0

      It is my opinion that "Spy Sweeper" is an inferior product simply aiming to penetrate the market with just that, marketing. As a spyware removal solution, it stinks.

      For all the services in technical support, hardware and software work, and all around PC support I have been offering people in my community, the number one job that has been shoe-horned into my schedule has been spyware removal. For years, I have been advocating and installing both AdAware and Spybot as a pair. For years, I have had nothing but compliments and words of thanks for the prevention measures and even words of praise for the software itself, as if I had anything to do with it.

      The first time I had ever heard of "Spy Sweeper" or even "Webroot" was working some shitty call center job for some extra change (I'm only a young adult here). As the result of a contract, we were allowed only to advocate "Webroot" products and "Spy Sweeper" in particular. We were actually informed to nay-say and advise customers we were assisting to avoid alternative products such as Lavasoft's AdAware or Spybot. This disgusting and underhanded tactic was the cause for my first "red flag" to fly up with respect to Spy Sweeper's products and corporate ethic.

      Fairness considered, I attempted to purchase and use "Spy Sweeper" for myself at one point. Upon installing this product, I was assaulted with the following immediate points:

        - A hideously unprofessional and inconsistent user interface. Seriously. This lovely "Spy Sweeper" is about two steps up from "Hello World" applications written in Swing (specifically in cases with a custom "dogshit" Swing look&feel) as far as aesthetics are concerned.
        - Buggy! Of AdAware and Spybot S&D, I had seen neither crash once. Within five minutes of dicking around with Spy Sweeper, I was subjected to two interesting random crashes that would easily be attributed to poor programming or misunderstandings of the Windows API on part of the software's developers. The system on which this occured was not at fault, it was a reliable system with a freshly installed and patched copy of Windows XP, not a spyware-ridden haven for horse porn (all "hurr oxymoron ^____^ lol use linux" jokes aside). On another occasion, an update of virus definitions was the seeming catalyst for the crash. Sorry, but this shit won't fly with a "real" user base.
        - Is it even effective? Well, Spy Sweeper failed to even detect blatantly obvious spyware on a system I was being paid to "tidy up". Spybot S&D, mere moments later, was able to return the system to a tidied state, spyware free. All other points aside, this is the real kicker. Comparing Spy Sweeper with Spybot or AdAware is like comparing some "rotating rainbow triangular prism" OpenGL tutorial with DOOM III.

      Reading the article, here we have a blatant "press release", to borrow a phrase from another Slashdotter, heralding Webroot as some sort of multi-national corporation of the future. We have a small-time company here critizing a product they haven't even seen the final implementation of in order to, in this article, essentially pump themselves up with a front-to-back motivational speech. This company fails to impress with, in the grand scheme of things, laughable profits and only venture capital gains to show for it. We're not looking at the next great thing in spyware or "maintenance" for desktop Windows users here, we're looking at the kid we all teased on the playground for the drool running down his shirt. The kid who, at this level, literally has to pay folks to play with him. You better believe Webroot pays out the ass in the desperate hopes their poor naming conventions and eighth-rate software will somehow become ingrained in even the more rarely used portions of our brain.

      If the rest of my arguments fail to dissuade you from this company and its product, I'll leave you with one other thought. The picture of the CEO in question, well, let's just say he looks as though he has an interesting and very personal perspective on the horse/owl/zebra porn spyware his product aims to remove. A vote for Webroot is a vote for horse porn. Remember that.

    4. Re:Webroot Spysweeper the best? by Anonymous Coward · · Score: 0

      I'll have to agree with whether SS is the best. One of the active shields constantly interferes with one of the games I play. Even when I have deactivate it, the game won't run. I have to reboot the computer before the game actually starts. I have had no problems with any other antispyware program.

      Then again, that was back when SS was v3.5, but I'm certainly not going to try out the latest version just to see if they've fixed it or not.

  21. ms and spyware by sirTifiable · · Score: 1

    is this really still a problem? Geez I run hundreds of Windows and Linux desktops with no spyware/malware/crapware problems. If I can create a windows image that stops this surely Microsoft can.

  22. email by LittleBigScript · · Score: 2, Funny

    Simple. Include email functionality. It will happen anyway.

  23. No one package to rule them all by dj245 · · Score: 1
    The thing with antispyware programs is, no one program detects all the spyware (depending on your exact definition of spyware). I remember a review a while back (a quick googleing can't seem to find it) that infected a computer with a few hundred pieces of spyware items (not unheard of), made a disk clone, then ran it through every antispyware package they could get their hands on. They had an itemized list of spyware items and whether the programs (at the time) removed them or not.

    Individually, they all failed to remove everything, even after many reboots and journeys into safe mode.

    But if you looked at the list of spyware items, you could be covered fairly well if you used two or three antispyware packages. Spyware nasties change hourly, and there are hundreds of variations and updates to fool the scanners.
    I think it is unfair for one antispyware company to be able to catch them all. This doesn't address the problem that windows should be more resilient to this sort of thing, but if you want good protection you are fooling yourself if you think only using one program to check for spyware will do it.

    --
    Even those who arrange and design shrubberies are under considerable economic stress at this period in history.
  24. This is a no-brainer by robotoil · · Score: 3, Insightful

    Trust MS for my net security? Not on their track record.

  25. Protection software for MS' anti-spyware software by Anonymous Coward · · Score: 2, Funny

    Maybe they could start writing software to protect against the flaws in MS' new anti-spyware software.

  26. AdAware Re:They can't be another Netscape by hackwrench · · Score: 1

    Yeah, when I think of removing spyware, I think of Adaware.

    1. Re:AdAware Re:They can't be another Netscape by rootofevil · · Score: 1

      i read an article a while back that basically proved that adaware is a steaming pile of feces.
       
      spybot s&d is a much better single-solution choice, although if im cleaning a machine i use adaware, spybot, defender, kazaabegone, x-cleaner, ewido and hijackthis.

      --
      turn up the jukebox and tell me a lie
    2. Re:AdAware Re:They can't be another Netscape by steve_l · · Score: 1

      I don't know about 'proof'. not having your defs file properly locked down is bad news, as malware could come in and patch it. But malware tends to just delete the spyware scanners outright.

      As for the performance thing, that I dont actually agree with. The author says that you get more performance by mapping files into main memory, instead of doing the IO yourself. If you are writing high performance code you dont map files, because then any pointer deref can cause the OS to swap in the data. Its better to have one thread reading (or use the Async IO operations) then have the second thread analysing the previous buffer. Better yet, if you are doing checksums against streamed data, you dont need lots of memory, just a rotating set of buffers being filled by thread #1, analysed by thread #2. So I'd argue that both the original and the 'much better' way to do it are both pretty limited.

      What I do have to say about adware is that it finds things that the McAfee security centre does not find, something i know because I spent three hours at a relatives purging the box of junk. After I'd dealt with the spyware, the trojans, and all the little quicktime/real/java startup apps, the only thing bringing the PC to its knees at startup was all this McAfee security junk, stuff that was not doing its job.

      F-Secure, that's who I pointed them at. Trust a vendor that doesn't trust Sony.

  27. Doors locked, now what about Windows? by noidentity · · Score: 2, Funny

    "Webroot's CEO David Moll maintains that 'The taking of a second-best product in this space [i.e. Vista's Defender, f.k.a. AntiSpyware] is akin to locking half the doors in your house,'"

    His product may lock all the doors in the house, but Windows is still wide-open. If you want a secure house, don't start with a modular home that fell off the truck a few times during transport.

  28. Desperation by gjuk · · Score: 2, Informative

    Basically - MS acquired Giant and started offering free Spyware within XP SP2. I'm sure these guys would have liked to have been acquired by MS - they might even have been in the running. No chance of a trade sale now - they've taken too much funding to provide backers with an attractive exit, and now they're stuck with having to fight against a product which will not only be free, but be part of the operating system which really needs it. Other than Firefox (which is also free), how many pieces of software have ever beaten that combination in the mass market? Given that it's impossible for most people to determine which is the better anti spyware product, the CEO's claim that people will choose a superior solution is pretty weak. Their options now are pretty rapidly to widen the offering (in which case the CEO's claim is pointless) or to provide a niche service to businesses (which is fine). The lesson? You can occasionally make money by offering a single software solution, but if you're betting your shirt - back a company that has more than omne product.

  29. What gives? by Anonymous Coward · · Score: 0
    1. Re:What gives? by masterzora · · Score: 1

      Umm... have you ever heard of the Associated Press or is this a troll?

      --
      Remember, open source is free as in speech, not free as in bear.
  30. Why this one? by freitasm · · Score: 1

    That sound like spam to me. Why bother about a company no one has ever heard about before. Why no talks about Lavasoftware, which makes a very good produc, or Symantec, or PC Tools Software?

  31. Second Netscape? There are too many to count. by twitter · · Score: 4, Informative
    The interesting issue here is whether this need for broadening the offer would be the case also for other leading companies subject to similar 'bundled-with' competition.

    It's a good thing to quote that "bundled-with" because the term is misleading. No one cares if M$ or anyone else gives away a text editor. What matters is if they make it so no other text editor will work. The Netscape complaint was that M$ strong armed vendors to gain a desktop software monopoly and then abused that monopoly in all sorts of ways to make it a huge pain in the neck to run Netscape on the desktop so that they could steal Netscapes' server market. The tactics included constantly changing the user's defaults back to IE and a combined smear and code breakage like they did with DRDOS.

    It's all very nasty and they keep doing it, over and over. They have done it with Office Software to Lotus and Word Perfect, they have done it with backup software, browsers and just about anything you can think of. The people who want to own the worlds computers want to own every piece of it. The developers ran off a long time ago except for a few large companies and even they are looking for a way out. The current fights are over media and, yes, antivirus.

    The most obvious result of all of these fights is a decidedly second rate user experience. So many second rate programs have been kludged together, they hardly work. All the hooks and barbs M$ made for others, they have to deal with themselves. Add a bit of DRM and remove the last of the companies trying to patch up your system and you get Vista, the five year development flop. It's kind of like watching an oil filled megatanker fall into the moon.

    Information about the DRDOS example can be found here:

    http://web.archive.org/web/20050313031916/www.ki ckassgear.com/Articles/Microsoft.htm

    Windoze performance information can be found anywhere Windoze is run. Just wait for them to curse.

    --

    Friends don't help friends install M$ junk.

  32. I have a question by Mistshadow2k4 · · Score: 5, Interesting

    Considering that Alexa is installed with IE 6 by default and it was known spyware even when IE6 came out, why trust Microsoft's anti-spyware? I'm really not trying to just troll here, but if they bundled IE with links to a known spyware provider in the first place, one has to wonder if a certain amount of spyware isn't deliberately overlooked by their program for business reasons.

    --
    I dream of a better world... one in which chickens can cross roads without their motives being questioned.
    1. Re:I have a question by Bios_Hakr · · Score: 1

      The Alexia installed with IE isn't a malicious spyware. It's main purpose is to track how much bandwidth a site gets like this:

      http://www.alexaholic.com/digg.com+slashdot.org

      Now, you may consider that a bad thing. However, it's a lot like a Neilson rating for a web site. They are not tracking you. They are tracking where you go.

      I know it's kinda fucked up. But it is useful.

      Also, don't forget that Slashdot itself *is* spyware. Don't belive me? Every page has (at least) two links back to Google for tracking purposes. Look at your Adblock lists for these:

      www.google-analytics.com/urchin.js

      www.google-analytics.com/__utm.gif?utmwv=1&utmn=16 5719776&utmsr=1024x768&utmsc=32-bit&utmul=en-us&ut mje=1&utmfl=8.0%20%20r22&utmdt=Spy%20Sweeper%2C%20 the%20Next%20Netscape%3F&utmhn=it.slashdot.org&utm r=0&utmp=/comments.pl?sid=186319&op=Reply&threshol d=3&commentsort=3&mode=nested&pid=15377738&utmac=U A-32013-5&utmcc=__utma%3D121224016.1653556031.1146 625095.1148006354.1148265152.18%3B%2B__utmb%3D1212 24016%3B%2B__utmc%3D121224016%3B%2B__utmz%3D121224 016.1148265152.18.16.utmccn%3D(referral)%7Cutmcsr% 3Dslashdot.org%7Cutmcct%3D%2F%7Cutmcmd%3Dreferral% 3B%2B

      Also, there are these that look pretty bad:

      a.as-us.falkag.net

      an.tacoda.net

      --
      I'd rather you do it wrong, than for me to have to do it at all.
    2. Re:I have a question by jawtheshark · · Score: 1
      They are not tracking you. They are tracking where you go.

      Can you explain me the difference? If they are tracking where I go, they still are tracking me, isn't it? If you pay someone to track where I go in real life, you hire a detective. Sure, in the report that he gives you will be like "9h00 shopping center, 10h26 Going home, ..." The guy didn't note down who I met or what I did because you didn't ask him to, but in reality he still had to follow me.

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    3. Re:I have a question by Bios_Hakr · · Score: 1

      From their perspective, it does not matter where one person goes. They want to know where thousands of people go. They are not tracking you, they are tracking what you view. It works just like the Neilsons' Rating. They want to know how many people view /. every day as compared to Digg.

      --
      I'd rather you do it wrong, than for me to have to do it at all.
    4. Re:I have a question by jawtheshark · · Score: 1
      I understand that, but it's still tracking. They have no business knowing if I go to slashdot.org twenty times a day, or if I visit thehuns every day. It's none of their business, even if it's only for statistics, and such things should be opt-in. If you agree to be tracked, so be it, but such things have nothing to do in a default installation of an operating system.

      Neilsons' Rating are completely voluntary and therein lies the difference.

      --
      Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
    5. Re:I have a question by MooUK · · Score: 1

      As far as I understand, they don't track where you go at all. They track that someone went there, but they don't link it to anyone in particular.

    6. Re:I have a question by Anonymous Coward · · Score: 0

      The difference is it's not personally identifiable - no-one can go through their data and say "jawtheshark visits this list of websites most frequently".

  33. Microsoft Malware by peterfa · · Score: 0

    Why does Microsoft bundle malware in with it's new operating system? That should kill out the competition in the malware market and make it easier on the rest of us with a homogenized environment. No more spyware trouble :D

  34. Huh? by corychristison · · Score: 1
    ... what the hell is this "spyware" you speak of?

    Is it some kind of game?

    ;-)

  35. Spy Sweeper Is A Dud Anyway by chromozone · · Score: 1

    I have had Spy Sweeper on my XP Desktop for over a year. It is always freezing up and/or choking. I can't even turn the computer off without it hanging and spitting up nag screens etc. I only bring it up for the weekly scan now and don't use it when surfing. I keep the program updated and even after clean installs the thing doesn't work like it did a few years ago. I don't think Microsoft is their only problem. I won't be renewing for this software because of its own issues.

    1. Re:Spy Sweeper Is A Dud Anyway by Knuthulu · · Score: 1
      The program constantly freezes and causes your computer to crash - and you have been running this for over a year ?

      Dude, you might want to, you know, like un-installing that program....

      And even if this is Slashdot I do mean un-installing Spy Sweeper, not Windows.

    2. Re:Spy Sweeper Is A Dud Anyway by chromozone · · Score: 1

      The sweeps/scans work ok. However a user is meant to be able to keep program on while browsing since it blocks nasties. Unfortunately the prophylactic usage is what causes my computer to choke - often after I try to shut PC off. So I just use it for a weekly scan and turn the program off with Task Manager before it can hang while trying to turn off PC. I am looking at a Mac now just to get away from all this endless pruning/blocking/scanning/deleting etc.

  36. My, they are full of themselves, aren't they? by harlows_monkeys · · Score: 1

    To be analagous to the Netscape situation, they would have to be clearly the best product in their category before Microsoft moves in. They are not. There are several other anti-spyware products that are as good as or even better than SpySweeper, some free, and some for-pay.

  37. Deep Trouble by Lord+Kano · · Score: 1

    I use Windows Defender on XP. I also use Spybot S& D, Ad Aware Personal, Spyware Guard and Spyware Blaster. Their problem is that, in the home user market, there are so many good free tools that the marketplace is shrinking for "for profit" spyware elimination.

    They'll be able to insure a place in the "business" market by producing a product that is superior to Microsoft's.

    LK

    --
    "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
  38. Kinda funny... by lucky130 · · Score: 1

    I like how many clamoured for M$ to include an anti-spyware solution and now, depending on how some people decide to act, litigation may keep it from being bundled. I'm not saying it will happen, or that anyone will even try, I just found it a little entertaining. And I'm also not saying that it should be bundled.

    1. Re:Kinda funny... by Anonymous Coward · · Score: 1, Insightful

      They weren't clamoring for MS to bundle an anti-spyware app. They were and still are clamoring for them to fix the security holes that allow so much malware in.

  39. Re:Second Netscape? There are too many to count. by Zaphod2016 · · Score: 1

    Wow, I feel old now.

    The DR DOS example is classic Bill Gates:

    1. State something which is technically foolish (640Kb is all anyone will ever need)
    2. Ignore the market for awhile, wait for someone else to come along and actually *fix* the issue
    3. Beg, borrow, steal. (Ok, ok, no begging.)

    Why is anyone shocked by this guy's behavior? Even before building a 20-year history of "Supreme Weasel" he was dumpster diving and selling other people's software. It's ALMOST as irrational as electing 2 shills from the oil industry to the White House and then complaining about "oil addiction".

  40. Maybe offtopic but.. by oztiks · · Score: 1

    I think the antitrust issues which microsoft was absconed for in the past really needs to be tightened just a tad.

    Lets say Microsoft keeps going down this road enabling buyers to always utilise their products first over another vendors system. I can see every vendor be at risk of being downsized or knocked out of business.

    Imagine, need a graphics application? install microsoft photoblahblah, adobe photoshop users see the simplicty and functionality of microsofts app to be the same and because windows makes it easier to implement their applications over competing applications people take presendence of ms photoblahblah not because its a better product but because its easier and more convienient?

    I see "easier" and more "convienient" something thats starting to annoy me, because its an excuse that people use all the time to defend Microsoft. Take away that excuse alone and debate the finer points of operating systems and software and Micosoft is left behind.

    But lets face it, compare DOS to today's systems compare Win3.11 aswell, even 95 was difficult for people to install and setup. XP and Vista represent ease-of-use and simplicity that people want today but how many car manufactors do you know that make the engine more simpler so people can fix it themselves without going to a mechanic? At the end of the day microsoft wants to cut everyone and everything out (even IT specialists if they can) through ease-of-use and simplicty.

    The price we pay for that simplicity quite frankly isnt worth it, I see it causing more issues in the progression of technology then it will fix problems and more so it hurts people/companies who have perfectly good ideas and the "right" to make money in this industry.

    Oh yeah Microsoft made the OS they are allowed to do whatever they like, right? They also own the cpu and the graphics card too? lets just break down what their product does. Its just an operating system it maps memory and timeslices the processor. The other stuff is not an os, the GUI is not an OS element. Microsoft Windows is a fully pledged environment not simply an Operating System like linux (but we know linux is even less then that).

    So how far does this environment go before it simply encapsulates everything? My view they have the OS, GUI and Web Browser. Being a web developer it means that the whole windows system from the word "get go" can see my programs (websites) and how long will it be before the whole process of developing a website in windows is encapsulated using windows based products and windows based tools? .NET anyone?

    For that reason alone I refuse to even touch .NET.

    Yes people want ease-of-use and yes other solutions are not as easy as ms based apps, but how far will this ease-of-use take us before we end up shooting ourselves as users in the foot?

    At present people dont see how previlant the dominance of ms based systems are at the moment because its simply crept up on us, in my view they've already won and hold all the cards and what every blaitent choices they make can destory anyones business at a keystroke, regardless if they are set out to put you out of business or not.

    Having said that how are you going to feel creating your next program? how are you going to feel knowing your excellence and time will be merely a template of disaster for yourself later down the track if you were to create something of originality and perhaps popularity?

    1. Re:Maybe offtopic but.. by frankm_slashdot · · Score: 1

      people who shoot themselves in the foot generally learn something from it - when they dont, they blow off another toe. its natures way of fucking those who cant survive. we would all be wise to let it run its course.

      coincidentally, im shooting myself in the foot by even writing this. but then again - i'm a believer in karma and i believe that my good karma outweighs my elitist outburst.

      as long as people continue to be so nonchalant about their computers as if they were some granted necessity... no, right... which allows them to live - as opposed to another responsibility that can aid in their life - they will continue to get what they deserve. DESERVE. moreover, as long as elitist IT personel like myself continue to help these people for next to nothing - we get what WE deserve. everything comes full circle. always.

  41. Don't waste your time. by khasim · · Score: 1

    Every time this topic comes up, there are always Microsoft fanboys who claim that it just isn't possible.

    The reality is that I can boot a Linux box with a Live CD and access the hard drive (read and write).

    Since most of the system will have been installed via the package manager, identifying what packages were installed should be a simple matter.

    Once you know the packages, you know the files, their location and their checksums. Since you booted from a Live CD, you aren't running those apps so they can be safely verified.

    Anything that can not be identified ... you either installed it yourself so you should be able to delete it and re-install it ... or it is a problem and can be deleted.

    There, a nice, clean system.

    And it is because of that technology that Linux will never have the problems that Windows has with viruses, trojans, worms and "malware". A Linux system can be cleaned without re-installing it.

    If you doubt it, try it.

    1. Re:Don't waste your time. by Rix · · Score: 2, Insightful

      Yes, in theory, a Linux system can be cleaned without reimaging it. Not practically though, and there's always the possibility you missed something. If a box is known to have been compromised, the only reasonable thing to do is reimage it to a known-good state.

  42. I've got a Crazy Idea.. by azerman · · Score: 1

    Why don't you let ME decide which anti-spyware programs to install ? I know it's the common belief here that only Slashdotters and Govt. know what is best for everyone else. But I think I might know a little bit more about what is in my best interest than you.

  43. Useless product by Jessta · · Score: 1

    I'd think their biggest problem would be that they are selling a useless product, not that they have competition in that field of uselessness.

    - Jesse McNelis

    --
    ...and that is all I have to say about that.
    http://jessta.id.au
  44. Webroot is nothing but a PR firm by Anonymous Coward · · Score: 0

    All Webroot ever does is invite Denver Post reporters in every week or two in order to show some software engineers standing around their "Threat Board" - a map of the world with a real-time display of worldwide virus threats.

    I think they might also have a side business selling expensive software that has a fraction of the capabilities of the leading freeware packages.

    Somebody should tell them the dot-com boom is over and nobody is going to buy their little company.

  45. Spyware is unbelievable! by seanvaandering · · Score: 1

    Being a recent purchaser of SpySweeper (tm), I never - EVER - have spyware products a second thought, until the day I switched ISPs and went from DSL to Cable. The installer apparently came and went, and when I got home 4 hours later, I've got Surf Sidekick popping up all over my computer. No firewall, just Windows XP, and my entire system is completely unusable. Cable internet just sucks.

    So I end up looking for a spyware program that will get rid of Surf Sidekick - and SpySweeper says it can clean it, even a few sites claim that they had the same problem, not anymore! Sounds promising, so I lay down my 29.95 and run it the entire night with the cable pulled. Next morning, and a couple reboots later? No change - popups, ads, and even a virus AVG can't clean!

    So everything is nicely reformatted with ZoneAlarm as my software firewall and a SMC router as my hardware router, and no problems since. For those who think customers are stupid who have two firewalls, obviously don't understand how much time you'll spend trying to "fix" your system. It's frustrating, and hopeless.

    I think it's a little presumptious for the owner of SpySweeper to think he's got the best product for antispyware - I don't think anyone has it, because there's always new flavours being made every hour of every day. Nothing like a good reformatting and a lesson in firewalls to teach you the value of your computer, and unless your opening every e-mail that comes in and clicking on every attachment, you won't ever need a spyware program.

  46. Who cares? by acidrain69 · · Score: 1

    I happen to think it's M$'s fault anyway, the whole spyware deal. It's their OS, they SHOULD have a scanner in it. Granted, some spyware gets on there in other ways, ie bundles, tricking the user into clicking on something, etc. But there should still be a way to scan for it. I don't think spyware scanning should fall under the antitrust thing. They wrote an OS, it is their responsibility to make sure it works. I don't care about the business that has sprung up underneath M$'s problems. Half of them are fake anyway, giving the scanner away, then charging for the fix; when most of the time the scanner put the problem there in the first place (if there even was a problem), or it adds it's own spyware.

    --
    -- Having a Creationist Museum is like having an Atheist place of worship
  47. Mac users need not bother replying... by Anonymous Coward · · Score: 0

    ... what the hell is this "spyware" you speak of?
    Is it some kind of game? ;-)


    Ok, so everyone now knows you're a Mac user, you can go away now..

    1. Re:Mac users need not bother replying... by corychristison · · Score: 1
      Ok, so everyone now knows you're a Mac user, you can go away now..
      Actually: No. I am not. I use this new, hip thing called L-I-N-U-X. ;-)
  48. Well, the word is, you'll have to PAY for by melted · · Score: 1

    Well, the word is, you'll have to PAY for Windows anti-spyware (and some other services). It'll be called Windows One Care. So the situation is a bit different, since the only reason why IE gained on Netscape (at first) was because it was bundled for free. It's only later (circa IE4) that IE had become a better product.

  49. Another P.R. move carried by Slashdot. by Futurepower(R) · · Score: 1

    The article referenced in the Slashdot story seems like a press release to me. I see no reason whatsoever to believe that Webroot is better. When the magazines began saying it was the best, SpySweeper had a bug that crashed Windows in some cases. If the magazines had truly tested SpySweeper, they would have discovered the bug, which I found after very little testing. (The bug was verified by someone at Webroot.)

    It seems to me that Webroot is better at marketing than other software companies. There is no reason to believe the claims in the article, that I can see.

  50. ugh by Anonymous Coward · · Score: 0

    Webroot's product, while fairly able at removing spyware from a system in safe mode, is rediculously bloated and riddled with bugs.

    Inability to update definitions from behind a proxy, frequent application hangups for up to a minute while waiting for various things to time out, a fancy "skinned" interface which uses more resources than is necessary for it to do its job, overly invasive shields, and real-time scanning that produces a noticable performance drop on any single-core PC.

    Despite the way it does its task, I'd have to put Webroot's product at the bottom of my "recommended" list of serious anyi-spyware products (don't get me started about Intermute products, or any of a dozen other anti-spyware applications which are just a joke.)

  51. Did anyone else read this as... by mypalmike · · Score: 1

    "Mine Sweeper, the Next Netscape?" I thought MS was integrating Internet Explorer and Minesweeper. Perhaps they'd call it Mine Explorer.

    OK, I didn't really think that.

    --
    There are 0x40000000 types of people: those who understand 32-bit IEEE 754 floating point, and those who don't.
  52. There is no "in theory". by khasim · · Score: 1, Flamebait
    Yes, in theory, a Linux system can be cleaned without reimaging it.
    There is no "in theory" about it.

    You Microsoft fanboys just don't understand the technology behind a real packaging system.
    Not practically though, and there's always the possibility you missed something.
    No, there is not.

    You boot with a Live CD.
    You mount the drive.
    You use "ls -a" to list all the files.

    You don't miss a thing. Every file will belong to a package. You identify the package from the file. That tells you the specs for those files.

    Any file that is not identified as part of a package may be a problem.

    It's as easy as that.
    If a box is known to have been compromised, the only reasonable thing to do is reimage it to a known-good state.
    Bullshit.

    I've used this process to clean up boxes after a co-worker tried installing updates from source. I found the crap he installed and what files he had manually deleted. Including the dependencies he broke.

    Don't try to pull any "in theory" shit on someone who's already gone through and done it. I've done it. It's easy. It's scriptable. You can argue all you want, but the fact is, I've done it and anyone else who knows the basics of their packaging system and shell scripts can do the same.
    If a box is known to have been compromised, the only reasonable thing to do is reimage it to a known-good state.
    Wrong.

    When the system is correctly designed, each component should be easily verifiable. The ramifications of such are beyond your ability to comprehend.

    The only time you'd have to re-build the box is when the components could not be verified.

    That is Windows. That is not Debian/Ubuntu/RedHat/SuSE etc.
    1. Re:There is no "in theory". by imroy · · Score: 1
      Any file that is not identified as part of a package may be a problem.

      Not necessarily. It might be a config file you've added or edited, or user data. But apart from that, you're absolutely correct. Windows just has so many places for malware to hide. Windows users don't realise just how transparent Unix/Linux systems are. With a LiveCD you can see *everything*, nothing remains hidden. Makes it very easy to inspect, repair, and/or backup. No need to wipe and reinstall.

    2. Re:There is no "in theory". by Rix · · Score: 5, Interesting

      You are talking out of your ass. I am not a Windows user, but I would be capable of burying a trojan in your system such that you wouldn't likely find it by that method. Certainly not without spending *much* more time than reimaging, which is the standard practice after a box as been compromised in any professional enviroment, which you quite obviously are not familiar with.

      Your method will work most of the time cleaning up after some peon such as yourself who's just fucked things up, but is is not a wise course of action against a determined, experienced intruder.

      You clearly do not understand how package managers work. While you would be able to track the base files installed, you wouldn't be able to do so with files generated files (take a look through /var...), nor would you be able to do so with intentionally changed files. (ie, config files, which often point to binaries to be executed) By your method, you'd have to go through every config file by hand, because if you're not keeping backup images, you're probably not keeping logs of what you've changed.

    3. Re:There is no "in theory". by Ohreally_factor · · Score: 1

      Uh, are config files executable? No? I'm not sure why you think you've found an exception.

      --
      It's not offtopic, dumbass. It's orthogonal.
    4. Re:There is no "in theory". by misleb · · Score: 1

      Your method will work most of the time cleaning up after some peon such as yourself who's just fucked things up, but is is not a wise course of action against a determined, experienced intruder.

      Most intruders are either script kiddies or other automated, scripted attack which often have a very obvious signature. These are usually very easy to clean up after on a unix machine.

      You clearly do not understand how package managers work. While you would be able to track the base files installed, you wouldn't be able to do so with files generated files (take a look through /var...), nor would you be able to do so with intentionally changed files. (ie, config files, which often point to binaries to be executed) By your method, you'd have to go through every config file by hand, because if you're not keeping backup images, you're probably not keeping logs of what you've changed.

      You could, concievable, keep MD5 sums of all significant config files and simply verify them based on a known clean config. It isn't like they change very often on a stable system. Between that and using package managers to verify binaries, and using chkrootkit, you should be able to avoid the downtime and potential data loss of reimaging a machine. If you're dealing with a dedicated and intelligent intruder (not just some script kiddie), you should be worried about what OTHER systems he/she has gotten into.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    5. Re:There is no "in theory". by Rix · · Score: 1

      This is true, but how do you tell the difference between a script kiddie, and someone trying to look like one? Yes, you could keep a checksum of every file on the system, but verifying that would take longer than just reimaging. If you've set the system up correctly in the first place, with data files on separate partitions from system files, reimaging should be painless.

    6. Re:There is no "in theory". by misleb · · Score: 1

      This is true, but how do you tell the difference between a script kiddie, and someone trying to look like one?

      Well, that would one clever hacker, I suppose. I guess I'm not that paranoid (a bad thing in this case, I know).

      Yes, you could keep a checksum of every file on the system, but verifying that would take longer than just reimaging. If you've set the system up correctly in the first place, with data files on separate partitions from system files, reimaging should be painless.

      How can you be sure the rootkit or backdoor wasn't buried in the data files? A web server, for example, may contain thousands of scripts and binaries. A complete system checksum validation will tell you more about what happened and you could even keep the system running if absolutely necessary (depending on the nature of the intrusion and function of the server).

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
    7. Re:There is no "in theory". by Rix · · Score: 1

      You can't keep the system running after it's been compromised, because you can't trust it to do what you tell it to. Your checksum generator, for example, may have been modified to always give certain values for certain files. Even if you use binaries off of a read only medium, there may be a hidden process watching for repairs, ready to put it's changes right back after you've fixed them. It can be valuable to take an image of the compromised system before wiping it, to find out how your were compromised.

      If a service is important enough that you don't want to bring it down for maintenance after it's been rooted, its important enough to have another, offline machine ready to take its place.

      As for hiding rootkits in data, this is certainly possible, but you won't have any scripts or binaries run with permissions in there (otherwise it's part of the system). While having the rootkit still available will help a recompromise, it could probably be just as easily retrieved from the net, once they're back in.

  53. Re:Webroot Spysweeper the best? NO! by JWedg · · Score: 1

    I installed Spysweeper and thought I should run it BEFORE I did my usual weekly backup. I had been running Spybot S & D, but all the reviews I'd read said you needed two programs to really do a good job of clearing up all spyware.

    Spysweeper informed me it found two rootkit-hidden directories, so I told it to quarantee them. Upon reboot it told me (within a DOS text) it listed all the things it was removing. When I got to the Windows login screen (XP, SP2+) when I touched the KB, it froze. I could not get into Safe Mode because it required a login too!

    After hundreds of dollars and days lost, I gave up and reinstalled Windows, losing ALL my settings and the stuff hidden within all those Windows directories, such as my email.

    And this was not the time to learn that while I had backups, I could not access them. For some reason after the Windows XP reinstall, that computer would not recognize my backup HD. So, I copied files from the BU to another machine, made CDs and copied them to my primary machine.

    Then, as a developer, I had to spend days reinstalling the 10-20 apps that I use all the time. Sheesh... and I had a deadline coming up soon.

    Needless to say, I was seriously P.O.-ed at these people for making software that could do such a thing.

    So, I will return to Spybot S & D and leave it at that and pray that it won't miss malware.

    Be warned - backup BEFORE you install any of these. Then if it works, and you remove malware, do another backup.

    I just wish I had done daily backups on a USB drive or something trivial like that. Be assured, I will be doing that from now on.

    I don't work for Spybot S & D, and I don't think Spysweeper is the only anti-malware program that has the potential to screw up systems like this. So, beware of any of these.

    Good luck!

    --
    For every complex problem there is an answer that is clear, simple, and wrong. -- H L Mencken
  54. Oh my god by suv4x4 · · Score: 1

    There will be always someone to whine about something. ALWAYS.

    The modern culture has imprinted on us this concept of "justice" and how if everything is "justified" and "proper" everyone should be happy.

    What a damn outright lie!

    If Windows doesn't include tools to protect us from malware (part security improvements, part signature based detectors), you can bet people will whine why Windows leaves them more vulnerable than if they bundle something.

    But if they bundle, busineses cry fowl about their business being broken.

    What can be done so all are happy? Nothing. And that's the full story.

    You can all reply with your little stories about competition and monopoly abuse, but as operational systems grow, they naturally include more essential features and will naturaly hit someone's business.

    Just like we experienced mass bankrupts of the thousands companies releasing simple text editors and calculators with the release of Calculator and Notepad (it's a joke, don't reply with historical references please...), it's just a fact of life: it's a demanded feature and got included.

    You can still disable it and install something else.

  55. Spy Sweeper, the Next Netscape? by suv4x4 · · Score: 2, Insightful

    Netscape fell victim if an aging code base and poorly implemented standards support (next to none...).

    Instead of making a quick series of patch fixing the standards support, speed and so on, they decided to drop everything and spend few years rewriting everything from scratch. Their first releases (Netscape 6, 6.2x, 7.x) were bloated, slow to start, slow to render, buggy and damn, they were ugly.

    The company's been sold, resold, split, merged, reorganised and what not, and after so many years we got Firefox, which was able to compete again with its 1.0 release.

    Was the inclusion of IE Windows important in this development of history? Certainly! However the fact IE4 was a significantly better browser than NS4 and all the crap NS did to themselves was what made the crucial difference.

    (yes IE4 was better than NS4, it's hard to comprehend it today, when IE6 is the worst browser of the bunch, but back then the situation was pretty different)

  56. spyware/virus detection is a bug workaround by GodWasAnAlien · · Score: 1

    it seems like since microsoft put all the security holes in, its only natural that they should provide you with the software to deal with the results of the holes.

    What does this have to do with a browser?

  57. Spy Sweeper is NOD32 for malware. by Anonymous Coward · · Score: 0

    Quote: "Spy Sweeper is to malware what NOD32 is to viruses"

    I've been using it for some time and it detects stuff that Ad-aware and Spybot S&D don't even bother checking. Webroot should NOT expand into other products, you see this happening regularly and the products FAIL because they don't get the attention they began with and eventually decay into a useless piece of junk.

  58. Just do it better by daivdg · · Score: 1

    I think Netscape tried to bulk up their browser packages with other things to beat IE, didn't they? That code base made a comeback when they stripped out all the communicator stuff and just did web browsing better. If this anti-spyware package does a better job it will be worth buying. If it just bulks up into bloatware, I doubt it will

  59. Vista's Defender, the next Internet Explorer? by SmallFurryCreature · · Score: 1
    The history of the browser war is slightly like this. MS pushed MSN, the world didn't take MSN and choose another browser. MS realized it might not control the net, it pushed IE through rapid development and with the luck that Netscape botched a release they gained massive marketshare and then stopped content to have the majority and no longer willing to continue to innovate.

    Cue IE not supporting standards and the continued lack of such things as PNG support.

    Until opensource arrives on the scene and sets MS ass on fire. Some optomist think that IE7 will finally see MS coming back into action so web design can move out of the 1990's.

    So will Vista's defender be the same? MS going full tilt to get marketshare then when it has it let the product rot as long as it is unopposed?

    Remember MS didn't give shit about IE being insecure as hell until people started seeking out alternatives. So once Vista's anti spyware/firewall software has killed the competition will MS this time be motivated to keep its software uptodate?

    MS is the textbook example of why monopolies are bad (lack of innovation). Will windows users again fall for it. Offcourse. They are windows users. A donkey may not trip on the same stone twice but the average windows user would loose an intelligence contest against the dumbest of donkeys. After it fell down a ravine. And had its brains picked out by hungry vultures.

    Oh well, maybe this time things will be different.

    --

    MMO Quests are like orgasms:

    You may solo them, I prefer them in a group.

  60. Are you from the past? by Anonymous Coward · · Score: 0

    After hundreds of dollars and days lost, I gave up and reinstalled Windows, losing ALL my settings and the stuff hidden within all those Windows directories, such as my email. ... Then, as a developer, I had to spend days reinstalling the 10-20 apps that I use all the time.

    What kind of developer doesn't know how to boot using BartPE or similar to rescue his data?

  61. That's nice, but... by Random832 · · Score: 1

    I've never heard of this program. If anyone's "the next Netscape" it's Ad-Aware or Spybot.

    --
    We've secretly replaced Slashdot with new Folgers Crystals - let's see if it notices.
  62. this is why by Anonymous Coward · · Score: 0

    slashdot: bashing microsoft no-matter what they do, since 1997.

    seriously. look through the microsoft topic. the stories are either complaining about a lack of features or complaining about ripping off/stepping on someone else's features. a thousand slashdot stories complaining about susceptibility to adware and viruses, and plenty of stories complaining about any steps microsoft takes to fix the problem.

    look: let me spell it out for you.

    first, microsoft is working with many software components and techniques that are older than the great mess of you. it is crucial that they maintain backwards compatibility. not just for your videogame playing pleasure either. the US economy is computerized, and like it or not, one way or the other, microsoft touches every aspect of the phenomenon 90% of the time. no drastic changes are possible in this light. that's why MS doesn't just re-write the OS from scratch. they certainly have the resources in knowledge and manpower.

    second, microsoft has to balance their approach between leaving room for developer (the OS they sell being where 90% of the world's programmers turn their attention, and is crucial to microsoft's continued success to keep that attention), and making sure they have a functioning environment. If MS makes too much of the software themselves, developers lose interest and wander away. The OS is the Industry.

    third, the dizzying world of obligations. MS is in a bizarre series of paradoxical requirements. the world depends on their software, if only just to continue to run 3rd party software they've invested in. so they must maintain that capability. on the other hand, the changing face of computing has placed immense strain on the architecture, especially as regards security in an always connected network environment. remember that windows XP is based on windows NT, an OS developed in the early 90s, well before the widespread adoption of the internet. everyone wants to have an OS that runs all software they have, perfectly, as well as perform flawlessly across all the dramatic changes of the internet. this story is an attempt to bitch MS out for addressing the problem...

    but wait! there's more. they also have 'due diligence' obligations to maximize profit for the shareholders. slashbots call this 'greedy', but actually, it's the only thing any officer at microsoft can do without being ruined across the sharp jagged rocks of tort court. it's the law, and their hands truly are tied. if it can be shown that they had a chance to make some money and passed it up (say because slashbots whined about it too much), bam. lawsuit. the shareholders can use the law to force the board to change the management. no high level microsoft manager, a very successful and intelligent person, is going to screw with that. an awesome responsibility, but doable. unless...

    you do it too well and every other half-assed, business casual pot-smoking tech company you were competing with flounders themselves out of business. yes, i'm talking about Sun. yes, i'm talking about Netscape. yes, i'm talking about Apple (till the return of Jobs, anyway). each one of those companies could have just got the shit together and competed. each one of those companies had ridiculous pie-in-the-sky or otherwise delusional fundamental flaws in the operating plan. the proof to all this is amply shown with the return of steve jobs to apple. apple didn't have to suck so hard through the 90s, and microsoft certainly didn't have anything to do with their decision at apple to in fact, suck that particularly hard. apple did it all by themselves.

    now, you can plainly see with these last two, how the due diligence at the secondary, also-ran companies would force those incompetent corporate officers to cast around for a place to assign blame (other than themselves, obviously). enter Microsoft, lobbyists and the DOJ. the rest is slashbot rote history.

    so many of you fail to grasp the problem it blows my mind. the point of all this is merely to show you that the pict

  63. The new enterprise version had issues by swb · · Score: 1

    I worked for a company that was a big Webroot reseller, and a lot of our clients had SS Enterprise installed. It worked well, cleaning non-cookie stuff that current MS AntiSpyware wouldn't see.

    Our problem came in the last 6-8 months when a major upgrade took place. Some systems attempting an autoupgrade tanked, requiring a PITA uninstall and reinstall of the admin console. Other systems took the autoupgrade, but the clients began going haywire.

    We eventually began removing it and not reselling it. Some guys thinks it works OK if you just do periodic sweeps and disable all the active shields, but at that point, why bother?

  64. g'bye quality by sgt+scrub · · Score: 1

    I think it is great. Windows is the OS that needs the pretection. If they provide the protection, kill off the people that have been doing it for them, and suffer the degradation in quality, I'm all for it. It is their pot. They like to piss in it. Let them live with it.

    There by the grace of fools goes the mob.

    --
    Having to work for a living is the root of all evil.
  65. Webroot Site Down? by sciop101 · · Score: 0

    Cannot reach!

    --
    The only thing new in this world is the history that you don't know.[Harry Truman]
  66. The fanboys are out in force today. by khasim · · Score: 1
    You are talking out of your ass. I am not a Windows user, but I would be capable of burying a trojan in your system such that you wouldn't likely find it by that method.
    Then why don't you post the files/changes that you would use to do so?

    Oh, you could ... but you won't?

    My, that's the first time anyone on the Internet ever made a claim that he refused to (read: "could not") substantiate.
    While you would be able to track the base files installed, you wouldn't be able to do so with files generated files (take a look through /var...), nor would you be able to do so with intentionally changed files. (ie, config files, which often point to binaries to be executed) By your method, you'd have to go through every config file by hand, because if you're not keeping backup images, you're probably not keeping logs of what you've changed.
    So, you're claiming that once I've validated every executable on my system ... a config file could still run a rootkit?

    I've stated before that this is not magic. Once the executables have been validated, they are validated. They have been verified to have not been compromised.
    You clearly do not understand how package managers work.
    Keep believing that.

    Meanwhile, I've posted instructions on how to accomplish this while all you've done is claim that you could, somehow, magically hide something there.

    Sure you could. Just don't get in the way of those of us who actually know what we're doing. Okay? Thanks! Buh bye.
    1. Re:The fanboys are out in force today. by misleb · · Score: 1

      So, you're claiming that once I've validated every executable on my system ... a config file could still run a rootkit?

      Perhaps not a rootkit, per se, but couldn't an intruder simply add a cron job which uses completely legitimate system binaries to either send him/her sensitive information or even provide a backdoor?
      How about something as simple as creating an account with root/sudo privs?

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
  67. Easily defeated. by khasim · · Score: 1

    During the validation process, the files in the /etc/cron* would also be validated. Anything that didn't match the package would have to be checked by hand. Since all of those should have been setup by you (the admin), it should be easy to quickly validate them.

    The same with the accounts. A quick check shows what accounts are configured with what access and what groups. The only time this would be a problem would be when it would also be a problem for re-building the machine. That is, when you have multiple user accounts that you cannot verify. If you're re-building the machine, you'd have to request that each account be verified and re-submitted. If you had existing documention that you'd use, then you'd also use that in the package validation process so no more time is gained or lost between the two approaches.

    So, in the worst case scenario, using the package management approach does not cost you any more time than re-building the box ...and...
    In anything other than the worst case scenario, you save time and are actually able to validate whether your box was compromised.

    That last part is not possible in the re-building processes.

    And knowing whether you've been compromised is a very important factor.

    1. Re:Easily defeated. by misleb · · Score: 1

      During the validation process, the files in the /etc/cron* would also be validated. Anything that didn't match the package would have to be checked by hand. Since all of those should have been setup by you (the admin), it should be easy to quickly validate them.

      There are also personal crontabs that are not part of any package. And individual accounts could have ssh identity keys setup such that an intruder would have access to your system even if all passwords were changed and all system config files verified. I'm not saying that one must necessarily reimage/reinstall a machine if compromised. I'm just pointing out that it is much more complicated than simply validating package files.

      That said, I think that the "just reinstall" mentality comes from the Windows world where it is accepted practice to just reboot/reinstall/reimage computers when they start acting strange. Not because admins are necessarily imcompetent, but because debugging Windows is often a nightmare filled with voodoo rituals and sacraficed chickens.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
  68. Re:Second Netscape? There are too many to count. by Blakey+Rat · · Score: 1

    State something which is technically foolish (640Kb is all anyone will ever need)

    PROVE IT. I've seen this quote attributed to Bill Gates about 30,000 times and never have I ever seen proof of it. What publication was it in? What year? Who was interviewing him? *anything*?!

  69. Trust and the spyware business by metamatic · · Score: 1

    Right. I think this is key. The anti-spyware and anti-virus software business is all about trust, and it's fairly obvious to me that Microsoft are not strong competitors in that arena.

    For example, does Spy Sweeper identify World of Warcraft as the piece of intrusive spyware it is? Does Microsoft's anti-spyware software?

    --
    GCHQ Quantum Insert installed. If only our tongues were made of glass, how much more careful we would be when we speak
  70. I was giving you the benefit of a doubt. by khasim · · Score: 1
    There are also personal crontabs that are not part of any package.
    Yes, there are. But they don't exist in some magical space. They are written to the disk.

    Here's my ORIGINAL statement on the issue:
    http://slashdot.org/comments.pl?sid=186319&thresho ld=1&commentsort=0&mode=thread&cid=15378503
    You don't miss a thing. Every file will belong to a package. You identify the package from the file. That tells you the specs for those files.

    Any file that is not identified as part of a package may be a problem.

    It's as easy as that.
    You're one step away from me questioning your ability to read with comprehension. Don't cross that line.
    I'm not saying that one must necessarily reimage/reinstall a machine if compromised. I'm just pointing out that it is much more complicated than simply validating package files.
    No. You start with validating the packages. That will tell you if you're machine has been compromised.

    Then you check the accounts.

    If you haven't found any problems at that point, then ANYTHING you do will have the same net effect. But re-building the machine will have taken MORE time and NOT give you the information that none of the files on your system were compromised.
    And individual accounts could have ssh identity keys setup such that an intruder would have access to your system even if all passwords were changed and all system config files verified.
    Yes, and that would be no different from re-building the machine and having those same users re-create those keys.

    In order to show that I'm wrong, you'll have to come up with a scenario where re-building the box would remove the threat while just validating the box would not. That includes checking the files that are not validated. As I originally stated.

    I go over this every time this subject comes up and so far no one has been able to give a specific scenario where that would be the case.

    #1. If the vulnerability is there, it is still there when the box is re-built.

    #2. If it is a matter of passwords and accounts, those are easily checked after the box is validated.

    #3. If it is something else, then explain how it got there in the first place and why it would not happen again when the box is re-built.
    1. Re:I was giving you the benefit of a doubt. by misleb · · Score: 1

      Yes, there are. But they don't exist in some magical space. They are written to the disk.

      Right, system files that are written to disk but are not part of a package. Therefore, a package validation does not find them. You have to include checking user crontabs as an explict part of your system review.

      You don't miss a thing. Every file will belong to a package.

      Not true. See above.

      You identify the package from the file. That tells you the specs for those files.

              Any file that is not identified as part of a package may be a problem.

              It's as easy as that.

      You're one step away from me questioning your ability to read with comprehension. Don't cross that line.


      Now you are just being an ass.

      No. You start with validating the packages. That will tell you if you're machine has been compromised.

      It will not necessearily tell you anything.

      Then you check the accounts.

      Is this conditional upon the previous step finding something or are you saying you would do it either way?

      If you haven't found any problems at that point, then ANYTHING you do will have the same net effect. But re-building the machine will have taken MORE time and NOT give you the information that none of the files on your system were compromised.

      Please check who you are responding you. I never suggested rebuilding a machine before verifying whether or not it has been compromised.

      And individual accounts could have ssh identity keys setup such that an intruder would have access to your system even if all passwords were changed and all system config files verified.

      Yes, and that would be no different from re-building the machine and having those same users re-create those keys.


      Question is, how would your method of verifying packages detect and recover from forged user ssh identity keys?

      In order to show that I'm wrong, you'll have to come up with a scenario where re-building the box would remove the threat while just validating the box would not. That includes checking the files that are not validated. As I originally stated.

      On a system that actually does anything useful, you could have thousands of unvalidated files. On a web server this could be particularly problematic because those unvalidated files often contain code (CGI, PHP, etc). And again, I didn't say anything about rebuilding a machine. I'm simply pointing out the weaknesses in your intrusion detection and recovery methods.

      #1. If the vulnerability is there, it is still there when the box is re-built.

      And it is still there after validating packages.

      #2. If it is a matter of passwords and accounts, those are easily checked after the box is validated.

      But there are exceptions like I mentioned with the ssh keys.

      #3. If it is something else, then explain how it got there in the first place and why it would not happen again when the box is re-built.

      Anyone who simply rebuilds a machine without first identifying the vulnerability used is just a moron. I'm not sure who is advocating that. It certainly isn't me. Rebuilding is meant to be more confident that all backdoors and rootkits are gone. But, again, I'm not necessarily advocating a rebuild in all cases. I've had compromised machines where the attacker never got root and only seemed interested in using the box to relay spam. Rebuilding woudl have been a waste of time. Given a more determined hacker with some serious skills, I might consider rebuilding the box.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
  71. Biting the hand the feeds? by dave562 · · Score: 1
    This whole thing is silly. WebRoot was only able to become a viable business because Microsoft released an insecure browser that needed a plug-in (of sorts) to protect it. Microsoft realized that their browser was a huge security hole, so they bought up a third party company that helps to address the problem. Then they released a software package for free that helps take care of something that shouldn't have even needed to be taken care of in the first place. Should Microsoft have charged the end-user for the cost of cleaning up the mess that Microsoft made? Of course not! But it's okay for another company to profit off of Microsoft's mistake? It seems to me like Microsoft did an alright job of cleaning up after themselves, but now WebRoot is mad because Microsoft (sort of) got their act together?

    Come on, gimme a break! WebRoot built a business around what amounts to a security vulnerability. Did they honestly expect that it would never be patched? What exactly do they want the outcome to be? They want Microsoft to continue releasing crappy software so that they have a viable business model? Why don't go after Symantec since Symantec has included 'malware' detection in 10.0?

  72. Don't break your toys little boy by Rix · · Score: 1

    I'm not in the habit of helping along the next generation of script kiddies. If you're smart enough to use the information responsibly, you're also smart enough to figure it out on your own.

    Beyond that, I've no interest in further enlightening you. Cross your fingers and hope no one who knows what they're doing ever targets you, because you're a low hanging fruit for anyone who does.

    1. Re:Don't break your toys little boy by Ohreally_factor · · Score: 1

      I'm not in the habit of helping along the next generation of script kiddies. If you're smart enough to use the information responsibly, you're also smart enough to figure it out on your own.

      Beyond that, I've no interest in further enlightening you.


      Translation: I'm so full of shit, if you pumped me in the ass a few times, you'd swear I was a stinky brown pasta machine.

      Seriously, that sort of "mysterious" BS might fly on your AOL chat rooms, but it's not going to fly on slashdot, even if slashdot has gone downhill the past few years.

      --
      It's not offtopic, dumbass. It's orthogonal.
  73. You shouldn't trust Windows Defender... by mr.nobody · · Score: 1

    or any other spyware removal tool. That is not to say that you shouldn't use any of them, but instead you should use two or three different ones. In doing residential support for a small college I've discovered that each removal program detects different things.

    I currently use Windows Defender and Ad-Aware for spyware, and we have Symantec Antivirus for virus protection. Additionally, sometimes I'll whip out Panda Titanium for bad infections. Plus there are the numerous specific removal tools out there for certain spyware packages

    I used to use Spybot S&D, but its bugs are too much. I can't spend 10, 15, or 20 minutes trying to find an update server that doesn't return a bad checksum, or when Spybot mysteriously takes exactly three seconds to scan a computer and says it's clean. Fixing that requires reinstalled Spybot. These may not be a big deal on one computer, but when they happen numerous times over the course of setting up several hundred machines, it's unacceptable.

    Anyway, as I've found, each scanner detects something different. Ad-aware in particular, is much more anal about what it considers unaccetpable that Defender, as you might expect. As for Webroot Spysweeper, I'll just say this: the worst spyware infections I've seen have all been on computers with Spysweeper already installed and running on them.

    --
    mr.nobody
    --Don't you wanna go where nobody knows your name?
  74. And so you go beyond a doubt. by khasim · · Score: 1
    Right, system files that are written to disk but are not part of a package. Therefore, a package validation does not find them. You have to include checking user crontabs as an explict part of your system review.
    Since I even provided you with a URL to my exact statements on the issue, you have gone beyond the benefit of a doubt.

    You are an idiot. You are an idiot because you cannot provide a single example where my process would not result in a system that was as clean and secure as completely re-building the box would.

    My system is faster, provides more information, and in all instances, provides a system that is as clean and secure as completely rebuilding the box.

    You are incapable of reading with comprehension because you are an idiot who is trying to push his idiotic agenda.

    This conversation is over. Feel free to post whatever ignorant tripe you wish in response. You've failed to substantiate your claims while I have provided example after example for mine.
    1. Re:And so you go beyond a doubt. by misleb · · Score: 1

      What the fuck, dude? Do you even read past the first line of posts? You don't even seem to know (or care) who you are reponding to. Take a Xanax or something and relax.

      -matthew

      --
      "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
  75. This is nothing but advertising by HermMunster · · Score: 1

    This is nothing but advertising for webroot. Since people in my field do not consider this product to be of any real consequence for detecting and removing adware/spyware/malware the use of slashdot.org is deplorable.

    Anyone doing any sort of cleaning on a system knows that you need a cadre of programs to clean and keep clean a system. Claiming webroot will be supplanted is just foolhardy and stupid.

    If anything this helps the users and the industry by stabalizing it. Obviously webroot can't offer a cost effective solution or we'd see everyone using it.

    In my shop, in the rare times when I see it installed, I remove it from customers computers and I put in a slew of free tools: spybot search and destroy, microsoft's product, ad-aware, the yahoo anti-spy toolbar, ewido, and a bunch of others. Weboot doesn't even come into the equation. What I mean is how can a junk program company claim vista will harm the industry.

    --
    You can lead a man with reason but you can't make him think.