Slashdot Mirror


Spy Sweeper, the Next Netscape?

GenieGenieGenie writes "AP is running a story about Webroot's Spy Sweeper, specifically about the competition it's facing from Vista's bundled anti-spyware. Webroot's CEO David Moll maintains that 'The taking of a second-best product in this space [i.e. Vista's Defender, f.k.a. AntiSpyware] is akin to locking half the doors in your house,' but others seem to think that if Moll doesn't want his company to become a second Netscape, it would 'ultimately [...] need to offer more than just an anti-spyware package.' The interesting issue here is whether this need for broadening the offer would be the case also for other leading companies subject to similar 'bundled-with' competition."

41 of 256 comments (clear)

  1. Opportunity! by Ohreally_factor · · Score: 5, Funny

    I think there's an opportunity here for someone to sell a spyware app, but to bundle a free operating system with it. That ought to hit MS where it hurts. =)

    --
    It's not offtopic, dumbass. It's orthogonal.
    1. Re:Opportunity! by amliebsch · · Score: 3, Insightful

      Why would presence of spyware indicate a defect in the code?

      --
      If you don't know where you are going, you will wind up somewhere else.
    2. Re:Opportunity! by Andrew+Kismet · · Score: 2, Insightful

      Um... if software can invasively monitor the Operating System without the user's knowledge, there's a flaw in the Operating System.

    3. Re:Opportunity! by creepynut · · Score: 4, Informative

      And then there's the programmers who sell out and bundle [spy|ad]ware with their programs. Sure, you can opt out, but most people only care to click Next, next, finish.

      Let's not forget programs like Kazaa, if it's even still around, which actually REQUIRE you to not only install, but keep the crapware on your system in order to run it.

      Defects in the operating system indeed.

      Of course, a lot of the nasty crap that gets on your computer without you DOING anything is generally on rathe questionable sites (e.g. Warez sites). This is thanks to lacking security in Internet Explorer, not the OS.

    4. Re:Opportunity! by drsmithy · · Score: 5, Insightful
      What gets me about all this is why MS is even releasing an antispyware program... wouldn't they be better off patching their own code?

      Anti-spyware (and antivirus) software isn't protecting from defects in the code, it's protecting from defects in the user.

    5. Re:Opportunity! by drsmithy · · Score: 2, Insightful
      Um... if software can invasively monitor the Operating System without the user's knowledge, there's a flaw in the Operating System.

      So... which OSes are you thinking of that aren't "flawed" ?

      Not to mention, how is it a flaw in the first place ? How is the OS supposed to know that the monitoring *isn't* "without the user's knowledge" ?

    6. Re:Opportunity! by grogdamighty · · Score: 2, Funny

      I completely agree - only a user with a defect would use Internet Explorer. ; )

      --
      My other sig is funny.
    7. Re:Opportunity! by mrchaotica · · Score: 4, Funny

      Hmm, that business tactic sounds familiar... oh yeah, that's right--the Mafia does the same thing!

      "Yeah, you'd better buy our 'protection service,' cause, you know, Vinnie and me would sure hate to see something happen to your computer..."

      --

      "[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz

    8. Re:Opportunity! by drsmithy · · Score: 4, Insightful
      So if you used Windows on a daily basis, you would not run a virus scanner or a spyware scanner?

      Not only "wouldn't" I, but I don't.

      I do, occasionally (maybe once every 6 months) run the online scanners over my PC. Thus far, no infection has ever been detected.

      You would rely solely on your personal computing prowess to prevent and/or remove all infections?

      I rely on common sense and the security facilities of my OS to avoid infection in the first place. In particular, I don't execute code I can't verify the source of, I don't run as a high-privilege user for day to day tasks and I filter inbound network connections to my computers.

      I will also point out that these are the exact same procedures I follow on *all* the OSes I use.

      If you say yes, first I'll call bullshit.

      I don't really care what you "call". Ten years of Windows use without a single exploit from malicious code is enough evidence for me that my methods work the majority of the time.

      Then I'll ask how you can expect this kind of tech savvy from your average user.

      Most malware - or, more accurately, the vector it uses - doesn't require even the slightest level of "tech savviness" to identify. How many people, if someone knocked on their door and said they were from their bank, would hand over a blank cheque and signature specimen for "verification purposes" ? Compare that to how many are happy to hand over their banking usernames and passwords to email and web based banking scams.

      One of the fundamental problem, IMHO, is many people are still working under the impression that stuff on the "internet" isn't "real", and that actions online can have genuine consequences out in the real world. My guess is they figure that since Word has an undo button, then everything else they do with the computer can be similarly easily "undone". Malware is going a long way towards rectifying this attitude (one of its few upsides).

      Now, with all that said I certainly wouldn't recommend most people go without anti-virus and anti-spyware tools. Particularly since most "normal users", IME, are primarily using the internet for inherently high-risk behaviour (swapping software, documents and other data). However, the simple fact is that neither anti-spyware, nor anti-virus software, is there to protect the user from flaws in the OS (although it may do this as a side effect). It's there to protect the user from flaws in their behaviour. No level of OS security known can protect from the user deliberately executing malicious code.

      (I use the word "flaws" here in the context of safe computing practices, not behaviour in general. I don't think for a second people *shouldn't* be doing the things they do with computers that typically lead to malware infection.)

    9. Re:Opportunity! by Overly+Critical+Guy · · Score: 2, Insightful

      Let's not forget programs like Kazaa, if it's even still around, which actually REQUIRE you to not only install, but keep the crapware on your system in order to run it.

      Many programs don't alert you of any of the things they're installing. On, say, OS X, you'd get a security prompt if something tried to modify the system without your knowledge.

      Defects in the operating system indeed.

      Yes, indeed.

      Of course, a lot of the nasty crap that gets on your computer without you DOING anything is generally on rathe questionable sites (e.g. Warez sites). This is thanks to lacking security in Internet Explorer, not the OS.

      Internet Explorer is bundled with the OS and is tied to it. The lack of functional limited privilege accounts is also an OS flaw. All the little flaws in Windows build up to create a very tasty target for malware authors.

      --
      "Sufferin' succotash."
    10. Re:Opportunity! by odourpreventer · · Score: 2, Insightful
      Yes I know its free

      No, it's not. The cost is hidden in the price of the OS.

      This is what irritates me most about MS's offers (i. e. Windows Media Player and Internet Explorer). They have never been, never are, and will never be free. The cost is just hidden elsewhere. "Free" is just an illusion.

    11. Re:Opportunity! by hairyfeet · · Score: 2, Informative
      Who says you can't uninstall IE?http://www.nliteos.com/nlite.html

      I do it all the time.Use it for making a more secure machine for those that aren't computer savvy.Just install a better browser(I install Kmeleon,Firefox,Opera,And Seamonkey and let them choose what's best for them) and leave mshtml.dll for those programs that use it in their help files.

      If you want to strip it from an exsisting pc,Here you go--http://www.litepc.com/xplite.html.It's not free,But $39.95 isn't a lot to pay when you consider all the MS crapware that it lets you toss.Not to mention the Malware can't exploit what isn't there.

      --
      ACs don't waste your time replying, your posts are never seen by me.
  2. Or You Could Pull a Netscape... by WeAzElMaN · · Score: 2, Insightful

    ...And Open-Source the program. Think of the possibilities.

  3. netscape products by gEvil+(beta) · · Score: 4, Interesting

    At the time of the IE/Netscape war, Navigator wasn't the only product that Netscape made. They also had a variety of server software, which from what I've heard wasn't all that bad, especially compared to the competition at the time. So saying Webroot should make other products in order to avoid the same fate as Netscape may not be particularly good advice. Depends on what other areas they branch into, I guess.

    --
    This guy's the limit!
    1. Re:netscape products by NutscrapeSucks · · Score: 4, Informative

      Yes, it's often forgotten that Netscape was founded to be an enterprise server software company, and got into selling shrinkwrap browser software by accident.

      As for Netscape's server products, the webserver was undercut by Apache, and the other stuff (groupware, application server) didn't sell well compared to IBM or Microsoft. Had they been successful with servers, Netscape would probably still be around today.

      As for this anti-spyware company, it reminds me about Quarterdeck's bitching when Microsoft took the outragous step of adding a memory manager to their OS.

      --
      Whenever I hear the word 'Innovation', I reach for my pistol.
  4. Who is teh best? by Anonymous Coward · · Score: 2, Insightful

    The taking of a second-best product in this space [i.e. Vista's Defender, f.k.a. AntiSpyware]
    So, they're the bests and Vista Defender the 2? What about ad-aware, spybots...?
    Also, who knew before about this "Spy Sweeper"?

    1. Re:Who is teh best? by Unknown_monkey · · Score: 2, Informative

      I work in CompUSA, Spy Sweeper is one of the top selling anti-spyware programs. And they offer "Internet Essentials" which is a combo of anti popup, anti-spyware, spam shredder, and windows reg cleaner.
      "You've never heard of a program" does not directly relate to "Value"
      You've probably never heard of ETAP but it's one of the best programs for circuit analysis in utilities.

  5. Is that the right way to look at it? by penguin_asylum · · Score: 5, Interesting

    I often see it the other way around...

    If I'm looking for a good anti-spyware program, and it comes bundled with something that I'm _not_ looking for, then I might instead use something that's not necessarily quite as good but isn't loaded down with other software.

    If their software is that much better than Microsoft's, then I'm sure they'll have no problem competing. Honestly most people install spyware without looking at what they're agreeing to, and the people who care about this will be willing to spend the time it takes to install a third party app.

    1. Re:Is that the right way to look at it? by Bios_Hakr · · Score: 2, Informative

      A lot of those "critical" flags are not, well, critical. Both progs seem to flag cookies as Spyware. Now, an open cookie might be bad, but it is not what I'm looking for when I run SpyBot.

      Furthermore, AdAware has a really nasty habit. I run it, clean the system, and reboot. When I run it agian, it finds more problems. No matter how many times I run this, it'll still find a few "critical" spyware problems.

      Just to test, I installed VMware and WinXP with SP2. I used the Autopatcher program to ensure the system was good to go. In installed AdAware and ran it with definitions I downloaded and manually coppied to the partition.

      On a fresh install with zero connection to the internet, I found several hundred "critical" problems. I ren the tool 3 times to let it clean the partition. Then I rebooted. After the system came back up, it found 20 more "critical" problems.

      My point? 90% of what anti-Spyware and anti-virus tools do is a complete scam.

      Install and patch XP. Install and update Firefox. Install Adblock and the Filterset.G rules. You'll be 99% protected from any problems. If you surf pr0n a lot, use a Knoppix LiveCD for that. If you download warez, then use VMware or VirtualPC to test things out first.

      --
      I'd rather you do it wrong, than for me to have to do it at all.
  6. Anti-spyware should not be considered a feature by DrLZRDMN · · Score: 2, Insightful

    Seriously.
    Why can't MS just make an OS which isn't so prone to it?
    If they somehow made Vista impervious (without a built in addon or tool) do you think people would be mad at them for killing the competition?

    Microsoft steals the lucrative business of fixing Microsofts mistakes. Spyware manufacturers also make money off of Microsofts mistakes.
    Just some food for thought.

    1. Re:Anti-spyware should not be considered a feature by Tx · · Score: 5, Insightful

      Oh, come on. I hate it when people make me defend Microsoft, but the fact is a lot of spyware is installed manually by users, via a bundle with some other product, and there is no way Microsofts OS can differentiate between user-installed spyware and legitimate apps.

      So yeah, Microsoft is at fault for the security holes that allow spyware to be automatically installed, but factor those out and there's still a need for anti-spyware for the computer-illiterate masses.

      --
      Oh no... it's the future.
  7. This is NOT the next Netscape... by jerkychew · · Score: 5, Insightful

    Netscape was a competitor to a product Microsoft sold. Anti-spyware software is little more than a fix for Microsoft's crappy security model that's included in its OS and default browser. There's a big difference here.

    Microsoft bundled IE and bullied PC makers into not putting Netscape on the desktop because it wanted to put Netscape out of business. That's a bad thing. On the other hand, Microsoft is bundling anti-spyware software into its new OS to protect its users from a) their own ineptidude, and b)the afore-mentioned crappy software that Microsoft themselves put in place.

    Where Microsoft wanted to get into a new market (the browser application) by crushing Netscape, in this case they're just trying to band-aid their operating system's vulnerabilities to (hopefully) lower the amount of user frustration in the future.

    I've been an IT guy for nine years, and I've always thanked Microsoft for releasing bad, buggy code. The anti-spyware folks should do the same, instead of being angry that Microsoft is finally trying to fix the problem.

    1. Re:This is NOT the next Netscape... by DrLZRDMN · · Score: 4, Interesting

      Exactly!
      An anti-spyware company suing MS for getting their act together would be the same as a spyware company suing MS.

  8. Go to bed with the dogs... by Anonymous Coward · · Score: 4, Interesting

    ..wake up with fleas. If you develop for, around, close to, in addition to, anything that micrsoft makes, and THEY aren't making the cash from it..good luck, you are sleeping with the dogs and taking a big chance, and I would include such offerings as FF for windows, a thoroughly misguided and ill advised effort, albeit some of them are well meaning. They are still naieve from the long haul view of things and will one day seriously regret what they are doing to make MS "better". All you are doing is giving MS breathing room as they further consolidate and corrupt things, and they WILL screw you over in the long run somehow.

  9. They are correct though by moore.dustin · · Score: 2, Insightful
    If they do not offer something that is both wanted by users and not included with Vista, they will be the next Netscape. A VAST majority of people are average computer users that would never seek a service they have already with the OS. Most would just assume the Windows one works and why use another one?

    But if can include both better and different services to appeal to customers, they will have a chance. Having a better product alone will not be enough though. Look how dominate IE still is even though it is pretty well known that Firefox is much better. Users just do not bother to care because they just dont know better.

    A chance only though, my money is on Vista to begin with - Who knows what problems Vista will open up for other companies to try to fix.

  10. In the security biz, there's always room by Opportunist · · Score: 4, Insightful

    You can't simply compare the anti-malware market to others.

    With browsers, you want to be compatible. You have a self perpetuating cycle where your browser wants to be compatible to the pages where the page creators want to be compatible with your browser. Thus the widest used browser is the most compatible, and thus "the best" if you want to be able to view everything "well".

    The same applies to media players, MP3 players and everything else where all sides involved want to be as compatible as possible.

    In the anti-malware biz, it's exactly the other way. You do NOT want to be "compatible" with the malware.

    Take a look at antivirus soft and the corresponding trojans, viruses etc. There is almost no trojan today that does NOT try to disable Kaspersky, McAffee, NOD etc. Trying to tear down the WinXP firewall is a given.

    I bet my computer against an old ice cone that the FIRST thing that happens as soon as the Windows "Anti-Malware" comes out is that every trojan that could be disabled by it comes with some Anti-Anti-MS-Malware functions, just like they do now with Anti-WinXP Firewall functions.

    In other words, there will always be a market for "small" Anti-Malware businesses. For the simple reason that, as odd as it may sound, they will have a higher chance to succeed. Simply by being neglected by the trojan writers.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  11. Second best? by supremegeekoverlord · · Score: 2, Insightful

    Okay, I haven't been following the spyware world closely lately -- and it changes fast -- but IIRC, when MS bought the rights to this program from Giant, most of the reviews I had read put it as the best antispyware program on the market. Now granted, that is a very disputable claim, and I obviously offer no evidence to support it. Still, it seems like Webroot came the close second here, so they have a little more to worry about than Mr. Moll seems to display.

    --
    Genius is the art of making everyone think you know what you're talking about.
  12. Webroot Spysweeper the best? by reklusband · · Score: 5, Interesting

    I've been in the spyware removal (windows consulting) business basically since there was spyware to remove (restart computer into safe mode and clean out startups) and I've NEVER had a client who used spysweeper come back and tell me how great it was. Usually they'd say the program didn't do anything to prevent or remove their britney spears doggie porn popups/virus/adware melange. I'd install spybot S+D, spyware blaster, and have them run spybot weekly after I'd removed crap. The spybot/spyware blaster machines ALWAYS came back cleaner. Now I just make them get a copy of Symantec Antivirus 10.0.2 and after installing the innoculations from spybot and spyware blaster, setting the default actions for adware/trojans to delete, and making sure it updates everyday, I get machines from complete porn addicts who refuse to switch to firefox that only have 20 or so (very very minor) issues after 3-6 months as opposed to 20,000(literally) in one month. And for the record I normally HATE symantec products, but their pro (non norton) antivirus is the best I've used.

  13. email by LittleBigScript · · Score: 2, Funny

    Simple. Include email functionality. It will happen anyway.

  14. This is a no-brainer by robotoil · · Score: 3, Insightful

    Trust MS for my net security? Not on their track record.

  15. Protection software for MS' anti-spyware software by Anonymous Coward · · Score: 2, Funny

    Maybe they could start writing software to protect against the flaws in MS' new anti-spyware software.

  16. Doors locked, now what about Windows? by noidentity · · Score: 2, Funny

    "Webroot's CEO David Moll maintains that 'The taking of a second-best product in this space [i.e. Vista's Defender, f.k.a. AntiSpyware] is akin to locking half the doors in your house,'"

    His product may lock all the doors in the house, but Windows is still wide-open. If you want a secure house, don't start with a modular home that fell off the truck a few times during transport.

  17. Desperation by gjuk · · Score: 2, Informative

    Basically - MS acquired Giant and started offering free Spyware within XP SP2. I'm sure these guys would have liked to have been acquired by MS - they might even have been in the running. No chance of a trade sale now - they've taken too much funding to provide backers with an attractive exit, and now they're stuck with having to fight against a product which will not only be free, but be part of the operating system which really needs it. Other than Firefox (which is also free), how many pieces of software have ever beaten that combination in the mass market? Given that it's impossible for most people to determine which is the better anti spyware product, the CEO's claim that people will choose a superior solution is pretty weak. Their options now are pretty rapidly to widen the offering (in which case the CEO's claim is pointless) or to provide a niche service to businesses (which is fine). The lesson? You can occasionally make money by offering a single software solution, but if you're betting your shirt - back a company that has more than omne product.

  18. Re:Uh, wouldn't we WANT a new netscape? by Bogtha · · Score: 4, Insightful

    No. The demise of Netscape led directly to Mozilla.org pissing about for over four years without a stable release while Internet Explorer simply soaked up all the marketshare.

    We might have better browsers now, but imagine where we'd be if a) Netscape continued to be a organisation that actually shipped software and b) Microsoft actually had to compete against another browser. We might have a decent Internet Explorer, for one thing, as things stand, Internet Explorer really has retarded web development for years.

    --
    Bogtha Bogtha Bogtha
  19. Second Netscape? There are too many to count. by twitter · · Score: 4, Informative
    The interesting issue here is whether this need for broadening the offer would be the case also for other leading companies subject to similar 'bundled-with' competition.

    It's a good thing to quote that "bundled-with" because the term is misleading. No one cares if M$ or anyone else gives away a text editor. What matters is if they make it so no other text editor will work. The Netscape complaint was that M$ strong armed vendors to gain a desktop software monopoly and then abused that monopoly in all sorts of ways to make it a huge pain in the neck to run Netscape on the desktop so that they could steal Netscapes' server market. The tactics included constantly changing the user's defaults back to IE and a combined smear and code breakage like they did with DRDOS.

    It's all very nasty and they keep doing it, over and over. They have done it with Office Software to Lotus and Word Perfect, they have done it with backup software, browsers and just about anything you can think of. The people who want to own the worlds computers want to own every piece of it. The developers ran off a long time ago except for a few large companies and even they are looking for a way out. The current fights are over media and, yes, antivirus.

    The most obvious result of all of these fights is a decidedly second rate user experience. So many second rate programs have been kludged together, they hardly work. All the hooks and barbs M$ made for others, they have to deal with themselves. Add a bit of DRM and remove the last of the companies trying to patch up your system and you get Vista, the five year development flop. It's kind of like watching an oil filled megatanker fall into the moon.

    Information about the DRDOS example can be found here:

    http://web.archive.org/web/20050313031916/www.ki ckassgear.com/Articles/Microsoft.htm

    Windoze performance information can be found anywhere Windoze is run. Just wait for them to curse.

    --

    Friends don't help friends install M$ junk.

  20. I have a question by Mistshadow2k4 · · Score: 5, Interesting

    Considering that Alexa is installed with IE 6 by default and it was known spyware even when IE6 came out, why trust Microsoft's anti-spyware? I'm really not trying to just troll here, but if they bundled IE with links to a known spyware provider in the first place, one has to wonder if a certain amount of spyware isn't deliberately overlooked by their program for business reasons.

    --
    I dream of a better world... one in which chickens can cross roads without their motives being questioned.
  21. Re:You joke, but that's a good idea. by croddy · · Score: 2, Informative
    No, it isn't. Do you have an md5 for all of your binaries?

    Package: debsums
    Description: Verify installed package files against MD5 checksums.
    debsums can verify the integrity of installed package files against
    MD5 checksums installed by the package, or generated from a .deb
    archive.
    Tag: devel::packaging, security::integrity, suite::debian
  22. Re:You joke, but that's a good idea. by drsmithy · · Score: 3, Insightful
    It's easy to clean a Linux box (if you should ever get infected). But it is extremely difficult to clean a Windows box.

    Just like it's "easy" to be a heart surgeon but "extremely difficult" to be a brain surgeon...

  23. Re:Don't waste your time. by Rix · · Score: 2, Insightful

    Yes, in theory, a Linux system can be cleaned without reimaging it. Not practically though, and there's always the possibility you missed something. If a box is known to have been compromised, the only reasonable thing to do is reimage it to a known-good state.

  24. Spy Sweeper, the Next Netscape? by suv4x4 · · Score: 2, Insightful

    Netscape fell victim if an aging code base and poorly implemented standards support (next to none...).

    Instead of making a quick series of patch fixing the standards support, speed and so on, they decided to drop everything and spend few years rewriting everything from scratch. Their first releases (Netscape 6, 6.2x, 7.x) were bloated, slow to start, slow to render, buggy and damn, they were ugly.

    The company's been sold, resold, split, merged, reorganised and what not, and after so many years we got Firefox, which was able to compete again with its 1.0 release.

    Was the inclusion of IE Windows important in this development of history? Certainly! However the fact IE4 was a significantly better browser than NS4 and all the crap NS did to themselves was what made the crucial difference.

    (yes IE4 was better than NS4, it's hard to comprehend it today, when IE6 is the worst browser of the bunch, but back then the situation was pretty different)

  25. Re:There is no "in theory". by Rix · · Score: 5, Interesting

    You are talking out of your ass. I am not a Windows user, but I would be capable of burying a trojan in your system such that you wouldn't likely find it by that method. Certainly not without spending *much* more time than reimaging, which is the standard practice after a box as been compromised in any professional enviroment, which you quite obviously are not familiar with.

    Your method will work most of the time cleaning up after some peon such as yourself who's just fucked things up, but is is not a wise course of action against a determined, experienced intruder.

    You clearly do not understand how package managers work. While you would be able to track the base files installed, you wouldn't be able to do so with files generated files (take a look through /var...), nor would you be able to do so with intentionally changed files. (ie, config files, which often point to binaries to be executed) By your method, you'd have to go through every config file by hand, because if you're not keeping backup images, you're probably not keeping logs of what you've changed.