Slashdot Mirror


Concerns Over Security Software

Arthbunot Bullwinkle writes to mention a BBC article exploring concerns about the future of security software. The piece looks at trends toward 'free' security products, such as ZoneAlarm, and wonders aloud about where those products will find themselves after Windows Vista is released. From the article: "'Now maybe the good ones will actually get rid of that attack but at the same time they may drop maybe 10 or 20 other attacks onto your system.' The bottom line, according to Mr Day, is that when you download free security software you cannot be certain what you get. But completely free security software may be a thing of the past when the new version of Windows hits the shops early next year. "

116 comments

  1. it's broke by Anonymous Coward · · Score: 0

    The requested URL (it/06/09/09/2050234.shtml) was not found.
    If you feel like it, mail the url, and where ya came from to pater@slashdot.org.

  2. RIP IPTables by Anonymous Coward · · Score: 4, Funny

    I'm pretty sad Windows Vista is apparently killing this off.

    1. Re:RIP IPTables by Anonymous Coward · · Score: 0

      could it be Ballmer's Chairs?

    2. Re:RIP IPTables by conjett · · Score: 1

      What about the gazillions of people who won't be upgrading to Vista as their hardware won't be able to support it? There will still be a demand for the security software as long as they don't upgrade to Vista. This article doesn't even address that phenomenon.

    3. Re:RIP IPTables by interval1066 · · Score: 1

      1) I, for one, won't be "upgrading" to Vista anytime soon.
      2) It won't kill off iptables
      3) I can't believe people still use iptables.

      --
      Python: 'And then suddenly you have a language which says "we're all stuck with whatever the whiniest coder wants".'
    4. Re:RIP IPTables by Mistshadow2k4 · · Score: 1

      That's a very valid point. We keep seeing these sensationalist articles about how much damage Vista is going to do when it comes about to this or that, as if everyone running Windows is going to switch en masse. In what universe will that take place? There are still people running 98 and 2k now, so why do these authors assume that 90% of Windows boxes are going to be running Vista less than a year after it's debut? Besides that, most Windows-users were running 98 (or, oh God, ME) when XP came out and XP was a definite step up -- but it's been made clear over and over again that Vista won't be a huge step up from XP. I definitely believe that it's adoption is going to be slower than XP's for that reason. When it comes out, people will find out that it's not such a big deal. And they will find out; how could they not? Computers are more common now, and those who get it will be questioned by everyone they know who doesn't have it. Most likely 90% of people running Vista willbe those who got it on their new pre-manufactured computer.

      --
      I dream of a better world... one in which chickens can cross roads without their motives being questioned.
    5. Re:RIP IPTables by symbolic · · Score: 1

      3) I can't believe people still use iptables.

      As opposed to...what? That bloated proprietary junk? I'd MUCH sooner run IPTables on a linux-based firewall than use any of the proprietary consumer stuff I've seen. There's no comparison.

    6. Re:RIP IPTables by Achromatic1978 · · Score: 1

      I like iptables, but how does one do SPI in it?

  3. Depends on the meaning of free by Anonymous Coward · · Score: 0

    Free as in "freedom" security software is safe. It's this gratis stuff that's dangerous.

    1. Re:Depends on the meaning of free by westlake · · Score: 1
      Free as in "freedom" security software is safe. It's this gratis stuff that's dangerous

      "Free as in freedom" doesn't mean you mean you can deliever anti-virus updates three times a day without someone like AOL paying the bill for development and distribution.

  4. Paid software safer? by pembo13 · · Score: 5, Insightful

    How is software that one pays for inherently safer?

    --
    "Thanks for all the money you paid to us. We've used it to buy off ISO among other things" -Microsoft
    1. Re:Paid software safer? by Dissman · · Score: 2, Interesting

      It's not... they are talking about spyware laden programs to remove spyware. I think it's because most people are cautious on what they spend on.

    2. Re:Paid software safer? by Anonymous Coward · · Score: 0

      It's safer!!! This is because if you pay the companies money, they will make an effort to make sure their software is safer, in order feel better about taking money off unsuspecting sheep.

      Uh. [fx action="looks at microsoft"]maybe not...[/fx]

    3. Re:Paid software safer? by gettingbraver · · Score: 2, Funny

      Because Microsoft says it is!

    4. Re:Paid software safer? by j35ter · · Score: 2, Interesting

      Cause you can put the blame on the guy who sold you this stuff.
      Managers usually dont like free software out of liability concerns...weird, the obviously never read the EULA!

      --
      Delta-Mike November Bravo Tango
    5. Re:Paid software safer? by Heembo · · Score: 1

      It gives you a clear target to SUE when shit hits the fan!

      --
      Horns are really just a broken halo.
    6. Re:Paid software safer? by Schraegstrichpunkt · · Score: 1

      Because you can pay somebody to care about security. Come to think of it, it's probably even more true of free (as in freedom) software that you've paid for, because it's easier to catch a cheater when you have source code.

    7. Re:Paid software safer? by Schraegstrichpunkt · · Score: 2, Interesting
      Managers usually dont like free software out of liability concerns...weird, the obviously never read the EULA!

      Or maybe they've noticed that EULAs aren't necessarily worth the paper they're written on. Has any EULA's "no liability" clause actually been tested in court?

      I suspect that it would be a lot easier to convince a judge that you're entitled to damages when you paid $2M for software from some vendor than if you had paid nothing.

      Of course, this all is assuming that when you said "free software", you meant free as in "free of charge". If you meant free as in freedom (e.g. a manager won't buy RHEL because there's "nobody to blame"), then I agree that it makes no sense.

    8. Re:Paid software safer? by paeanblack · · Score: 2, Insightful

      How is software that one pays for inherently safer?

      The price does not magically alter the safety, but the infrastructure required to collect and process payments does add some measure to the software's pedigree.

      To implicitly trust software that's purchased shrinkwrapped in a Walmart is foolish, but it's certainly far, far, safer than the "Click Here Now!!" spams. It's not the price that conveys trust, but the investment the seller has made into the distribution chain.

    9. Re:Paid software safer? by RobertLTux · · Score: 1

      umm a couple of bits of info
      1 if you buy a Redhat box (maybe enterprise desktop whatever) you have a number to call if you buy several pallets of boxes then most likely you have your own personal "ShadowMan" to call.

      2 littering for any reason is bad (and damages your Witness) SPAM for any reason is bad even if its the Kosher kind.

      --
      Any person using FTFY or editing my postings agrees to a US$50.00 charge
    10. Re:Paid software safer? by kimvette · · Score: 2, Insightful

      It's the warm fuzzy feeling some people get when they choose something they paid for over something that's free, because, if it's free, it's no good, right?

      --
      The Christian Right is Neither (Christian nor right). See: Matthew 23, Matthew 25, Ezekiel 16:48-50
    11. Re:Paid software safer? by grcumb · · Score: 4, Insightful
      It gives you a clear target to SUE when shit hits the fan!

      Man, is that old chestnut still around?

      Let me answer the same way I answered my country programme director when he raised the same issue vis à vis commercial support for FOSS. He said to me that 'confidence' was very important, and that some managers just liked to feel that they had some recourse, even if that feeling was effectively fantasy.

      I looked at him and said, 'Since when is it our job to indulge people's fantasies? We have a fiduciary duty to our clients to provide them with the truth, and when indulging their misconceptions works against their best interests, we are duty-bound to advise them of the truth.'

      So now I'm going to say to you: You can't sue. If you do, you won't win. You gave up your right to sue when you agreed to the license.

      --
      Crumb's Corollary: Never bring a knife to a bun fight.
    12. Re:Paid software safer? by westlake · · Score: 1
      How is software that one pays for inherently safer?

      How many free and open source projects are starved for staff and funding? I get security updates from my cable ISP about four times a day.

    13. Re:Paid software safer? by Lordpidey · · Score: 1

      Wow, if it has enough security holes to be able to be patched four times a day.... then you might wanna look somewhere else.

      --
      Some people encrypt by using rot-13 twice. I prefer the more secure method of using rot-1 a total of twenty six times.
    14. Re:Paid software safer? by madcow_bg · · Score: 1

      So now I'm going to say to you: You can't sue. If you do, you won't win. You gave up your right to sue when you agreed to the license.

      You should note that ALL licenses have to obey the law. Did you notice that all liablity disclaimers end with "... to the extent provided by applicable law" or similar phrases. Maybe applicable law have to be changed (or does already, I don't know really) so if you pay for a license you get some kind of protection for your money.

      I just want to point out that this case is not that trivial.

    15. Re:Paid software safer? by morcego · · Score: 1

      You might as well ask yourself how many non-free, non-oss projects/companies die every year.

      --
      morcego
    16. Re:Paid software safer? by saskboy · · Score: 1

      Paid security software is much more dangerous on average. The only way crooks make money on "security software" is by tricking people into paying for the stuff that introduces more crap onto the system, like McAfee, Symantec, and Bullgard and the spyware ilk.

      --
      Saskboy's blog is good. 9 out of 10 dentists agree.
    17. Re:Paid software safer? by Anonymous Coward · · Score: 0



      Now that this is nested deeply into legal stuff, let's make it complete: SPAM and spam aren't the same thing:

      SPAM vs. spam

      On top of that, most in the anti community would go deeper than the UCE, which spam is supposed to represent.

      UCE = Unsolicited Commercial Email

      UBE = Unsolicited Bulk Email

      Don't think there's a difference? Wait for the '08 election. You'll find plenty of policitally oriented charged UBE.

      BTW, politically flavored UBE is legal under U-CAN-SPAM 2003.

    18. Re:Paid software safer? by rapidweather · · Score: 1
      It is hard to somehow disregard the cost factor when determining the worth of what you are using.


      I almost think our brains are hard-wired to think that we "get what we pay for". Perhaps the roots of this idea is that the vendor/seller, creator, etc. really put a lot into the product, and fair is fair, charge what it is worth.
      So, some of the free products are just as good, because they tell you the creator of the software is on a mission, having been wronged sometime in the foggy, distant past, and is not going to charge for it, lest the poor (who need it the most) be left out.
      Yes, the poor need it the most, because they cannot be going out and buying a new PC with the same frequency as the rich when their's becomes infected, slows down, locks up, or is not the latest and greatest.
      Microsoft has put a lot into Vista. I hear today that a ton of beta testers have worked with the OS, and the bug report input to the developers must be tremendous.
      Microsoft will get a lot of money for each copy of Vista, and that copy will only run on one box, just like XP, apparently. Don't they have a deal where you can call them and have it run on one more, for a fee? Or something like that. Certainly not like any of the linux distros.
      It will be hard to find real fault with Vista, as it is with XP, since we did pay for it, rather than get it for free. The "you get what you pay for" idea will win in the end.

      The main point with any Windows computer is that Microsoft and the hardware makers get together to make sure everything works, and that the machine boots up to a desktop just by turning it on, no questions asked. Sure, XP asks which user account you want, but that's it.


      Too bad that XP and now Vista will be targets for worms, trojans, viruses, perhaps like never before. Only time will tell.
      I still won't go onto the internet to do online purchases with XP, and cringe when I see others do that, and online banking also.
      Strangely, when I ask "more affluent" computer users about that, they increasingly reply, "I have a Mac". That usually blows a hole in my attempt to get them to try linux.
      Number one, they have spent a lot on a Mac, and number two, my livecd linux (see screenshots) won't run on a Mac.


      Thank goodness for loadlin.exe, I'm getting good a setting up my livecd linux to run from a MSDOS menu via Windows autoexec.bat, with no CD in the tray, and very little hdd activity compared to running '98 itself on a box. Getting into linux before '98 presents the "microsoft sound" and subsequent desktop, keeps the sound card open for the linux driver.

      So, we keep trying, even in the face of the impending Vista launch, the day when no one will want to hear about a secure linux system.

      --Rapidweather

    19. Re:Paid software safer? by Schraegstrichpunkt · · Score: 1
      1 if you buy a Redhat box (maybe enterprise desktop whatever) you have a number to call if you buy several pallets of boxes then most likely you have your own personal "ShadowMan" to call.

      I don't understand; What is your point? Red Hat Linux is mostly, if not entirely, free software.

      2 littering for any reason is bad (and damages your Witness) SPAM for any reason is bad even if its the Kosher kind.

      Yes; That's my point.

    20. Re:Paid software safer? by Anonymous Coward · · Score: 0

      Wouldn't the free softwares be the most likely to survive? The ones who've payed for security in the past, and who now probably feel a bit betrayed, or at least made obsolete, by this latest upgrade, won't make such an obviously unwise investment again. In addition, the security for-profits, unable to compete with built in security, will be forced to adapt more rapidly than they are able: in all likelihood, the expensive products will be outcompeted. My humble prediction is that the free products will succeed where for-profits -- and Microsoft's own security measures -- fail.

      Josh Hulsey

    21. Re:Paid software safer? by ServereNerd · · Score: 1

      I don't know why anyone would blindly download something without researching it, but I wouldn't put it past him. I always search for its name to look up its reputation, and to dig up the dirt [if any] on it. More often, I go off of my friends' tips for good apps.

      Plus, I think that paid software actually has the potential to be more dangerous. You could either download an app and find out it's malware...or you could *pay* for an app and find out it's malware! At least the free versions let you see if it's good before you give them your credit card info. Other than that, they are capable of the same things.

      A price isn't the defining factor. You hardly need any money to collect payment. There's probably a ton of web-apps that do it available. Paypal would work too, but it leaves an incriminating paper trail. Name-recognition and/or a good reputation are what you really need.

      If anything kills the security apps, it'd be a real-live secure Windows Vista. Until then, I cross my fingers for it, and brace for the imminent blunt impact of reality.

    22. Re:Paid software safer? by blkros · · Score: 1

      Because the people who want to sell it to you say so.
      Trust them.
      And, of course, Microsoft thinks that closing off their OS even more, will make it safer. HAHaHa.

      --
      Damnit, Jim, I'm an anarchist, not a F@#$!^& doctor!
    23. Re:Paid software safer? by Anonymous Coward · · Score: 0
      I looked at him and said, 'Since when is it our job to indulge people's fantasies? We have a fiduciary duty to our clients to provide them with the truth, and when indulging their misconceptions works against their best interests, we are duty-bound to advise them of the truth.'

      You told your manager that??!?!!
      So, how did that work out for you?
      If it went well (and he's not just humoring you), you have a great job. Enjoy it while it lasts (until somene better at telling people what they want to hear takes away your department/company).
    24. Re:Paid software safer? by Thundersnatch · · Score: 1
      You gave up your right to sue when you agreed to the license.

      IANAL, but I do lots of contract negotiations on behalf of my company. I do know this: A contract cannot allow the contracting parties to agree to ignore the law. In many jusisdictions, "lemon laws" and consumer-protection laws take precendence over any license agreement (or other contract).

      So, for example, the license agreement may say "software sold as-is with no warranty", but in many states require that all goods sold have basic fitness and suitability-to-purpose. That is, the software must work in general - otherwise the seller has committed a fraud. Software that crashes every 5 minutes, for example, would not pass this test.

      By extension, software sold as "security software" that does nothing - or negativly impacts security - would not pass the "basic fitness and suitability-to-purpose" test.

    25. Re:Paid software safer? by LifesABeach · · Score: 1

      I RTFA, which could place me in the minority. Something bothered me about the article's view point; That we should all wait for the manufacturer of the product to create the necessary patch. Given historical events, that idea paints a picture of me, (waiting), as the peasant farmer; While the invading hordes come over the hills. Not cool.

      "slowly, one by one, the penguins steal my sanity" - Unknown

    26. Re:Paid software safer? by IT071961_nurashikin · · Score: 1

      hacker will like the challenge that kidda tricky..no matter the software that we use paid or not..althought is a good to used paid software rather than download from internet..how about piracy software that those people buy?people also pay for it ('',)

  5. Errrm by Craptastic+Weasel · · Score: 2, Funny

    Maybe chris had troubles fixing computers, as stated here but we would hope there would be LESS of a need for 3rd party security apps with Microsoft's next gen Windows release...
     
    btw, what about Kate Russell below him, I wonder how she feels about pentration testing...
     
    I sacrifice my karma in the name of cthulu!!

  6. Some key explanations are missing. by Anonymous Coward · · Score: 3, Funny
    when you download free security software you cannot be certain what you get.
    ...On the other hand, when you buy Norton, you can be certain that what you get is crap.

    But completely free security software may be a thing of the past when the new version of Windows hits the shops early next year.
    ...However, retail security software will continue to exist as these products cater to a demographic that does not understand computers, and these people will always exist.
  7. The biggest problem... by Dissman · · Score: 5, Insightful

    The biggest problem that I see with Vista is that everyone will be encouraged to use nearly identical software. It's why most viruses written get past Norton at least for a few days... everyone knows to test Norton and McAfee to be sure your virus works.

    I've always gained a bit of security by using Mozilla rather than IE... by viewing my e-mail in plain text rather than HTML. By using Zone Alarm rather than a Norton or Microsoft product. When you have everone using one piece of security software, it's less secure because if you can infiltrate one, you can infiltrate all.

    1. Re:The biggest problem... by techintherealworld · · Score: 1

      and by using a product that actually shows you the functionality of html or any of the other higher functions we all risk the security but if you live in professional secure business the viruses are held at bay and you never I repeat never experience an impact to your daily life. I have been in one for over 5 years and would have to say that I only experienced the 4 hour delay in my SQL database server response as they patched it. Once that was done they were back online. A virus has not been able to infiltrate the layers of security that are applied. If the company wants a secure network the products and relationships with the brain trust that resolves these issues is available. It does cost money but not as much as down time or repairs. Come join us in the 21st century where products that are not user friendly are left with the ATARI games and comodore64 PCs of the 80s... good as door stops... leave mozilla there too... just like the other wanna be technological solutions that never measured up to the enterprise solutions that the rest of the world uses every day.
      Sure we would all be more secure if we just used paper too... but that's not really the issue here is it. Using Mozilla or any other substandard application for security reasons is just plain stupid like the ostrich.
      You are welcome to join us in the real world.
      maybe I should post this in plain text so you can read it...lol
      Using one peice of security software is not the issue the issue is using a type of software that allows for an attack. Any type of attack is the threat and as long as the human race remains creative...there will be someone building a firewall/security solution software that prevents someone from building a virus to attack it. People have been robbing banks for centuries... it doesn't mean the bank is at fault for having a common type of security system. Its just the way life is. why not join us and I can send my comments back to you in html and you can see your Internet in color like the rest of the world ...lol
      Mozilla... for security reasons...you can't see it because this is plain text but I'm shaking my head...

    2. Re:The biggest problem... by Dissman · · Score: 1

      I read my *e-mail* in plain text... There is really no reason that my e-mail has to be flashy and glitzy or take input from an SQL database... that's not what I, or most everyone else needs from e-mail. In fact, with all the time you'd waste just making a simple e-mail message glitzy, i can get a fuckton more work done... and live in relative peace from a lot of the subliminal spam that's making it's rounds.

      Not to mention... Why is using Outlook and Internet Explorer... "being part of the 21st century?" Firefox, which is what I use to browse has a clean, crisp interface, and lots of useful features that IE doesnt have such as... tabbed browsing, and highly useful extensions.

      I've seen the way things are done in the big world of IT... I've spent time in an enterprise environment... and my job was to do nothing but chase virii out of the computers because people insisted on using IE and Outlook in unsafe manners... even though we used programs like McAfee and ZenWorks to "protect us."

  8. Reason to delay upgrading by Jarnis · · Score: 3, Informative

    This is yet another good reason to avoid upgrading for now.

    Personally, one of the major reason why I haven't taken RC1 into actual use beyond testing it a bit is lack of compatible 3rd party firewall.

    Then again.. situation was pretty similar when Win2K came out - early on nothing was compatible. XP was easier because it is effectively a reskinned Win2K, and 99% of Win2K apps worked out of the box - even security products.

    Vista is quite a bit more than a reskinned XP, as lots of stuff under the hood has been reworked, and again it's just like Win2K - nothing works intially, but I'm sure over time the problem is going to be fixed. In fact, it's surprising how good the situation is, considering official launch is still several months away.

    1. Re:Reason to delay upgrading by dbIII · · Score: 0, Troll

      There's another solution - put your MS Windows machine under adult supervision with a network card that runs another OS and has a firewall with a web front end on it. External hardware firewalls are another answer and are a lot cheaper than the internal ones - but both avoid the problem of having to be comaptible mith the new Micrsoft Internet Protocol stack by only dealing with the packets - TCP, UDP or whatever. The only way third party networking stuff would run with Vista if the networking stack really is very new is if the apps were altered to work with Vista.

    2. Re:Reason to delay upgrading by Jarnis · · Score: 1

      ... and they provide no application-level outbound filtering.

      Which is pretty much needed in today's "every program wants to call home" world. I want to decide what a (new) program gets to do as far as the network connection goes.

      I do have a firewall box between my computers and the world, but it only protects against inbound junk. It's impossible to manage against outbound threats without application-level blocking.

      Yes, in theory one could program a box to do stateful packet inspection and block specific applications you want to keep from calling home, but it's almost impossible to know which new program wants to do it (and using what rules) short of running a network analyzer on the firewall box, and always analyzing the traffic after installing each new application. While some ubernerd might enjoy such setup, I just want the damn thing to work and be easy to administrate.

      Software application-level firewall is a *bit* more practical in offering outbound control. And there is no working solution for Vista (yet). And yes, I'm discounting the MS 'firewall' on purpose. It sucks less than XP firewall, but it still sucks.

    3. Re:Reason to delay upgrading by CrossChris · · Score: 1

      Jarnis: "Vista is quite a bit more than a reskinned XP, as lots of stuff under the hood has been reworked"

      Nope. It's just a reskinned XP with more DRM thrown in to the mix. Microsoft discovered that all their brilliant plans were not possible without proper programmers, so all the "improvements" were quietly dropped, and the same old crap was moved into the "new" product. It as a few extra "nag" boxes, to give the illusion of "security", but it's got even more significant holes than XP.

      Game Over, Microsoft

    4. Re:Reason to delay upgrading by Jarnis · · Score: 1

      Sorry, you are a misinformed troll.

      http://en.wikipedia.org/wiki/Features_new_to_Windo ws_Vista

      I will repeat myself: Vista is quite a bit more than a reskinned XP.

      No, it's not perfect (hey, it's a Microsoft product), and it will most likely have it's fair share of new holes, but MS has definitely done a lot more than when they reskinned 2K as 'Windows XP' (*that* was a reskin job).

  9. Freedom to innovate, ad nauseum by Schraegstrichpunkt · · Score: 4, Insightful

    Um, I hate to defend Microsot, but unlike Internet Explorer, which had no need to be integrated into the OS as much as Microsoft claimed it was, but basic network security features are exactly the kind of thing that should be built into the OS. I hope that antivirus programs eventually become obsolete (likewise with firewalls *anywhere* except perhaps in extremely sensitive environments, but that's probably a long way off).

    Now, I'm not particularly confident that Microsoft will actually manage to render third-party security software obsolete, simply because the company just isn't all that good at software development, but I'm certainly not going to rebuke them for trying.

    1. Re:Freedom to innovate, ad nauseum by Schraegstrichpunkt · · Score: 1

      sigh. s/Microsot/Microsoft/; s/but basic network/basic network/;

    2. Re:Freedom to innovate, ad nauseum by bendodge · · Score: 0

      MS is very good at software development. Look at Publisher 2003 for example. My mother can do anything she wants on it, and it has tons, and tons, and tons of features. MS is very good at software development, but too much success is hurting them.

      They have such success that they are forced to cater to a huge variety of people and environments. The result is bloat. Small 3rd party products are loved because only people who need them download them. Same with OSS. So Microsoft is really stuck. (Except maybe if they made 2 wildy different Os's, a grandma/office version, and a geek version. But that would make the security problem even bigger for the lay person.)

      --
      The government can't save you.
    3. Re:Freedom to innovate, ad nauseum by b0s0z0ku · · Score: 1
      But that would make the security problem even bigger for the lay person.

      Not really. Hetrogeneity of OS's will do a lot to prevent virus spread, because the same bugs are unlikely to be repeated across OS's.

      -b.

    4. Re:Freedom to innovate, ad nauseum by bendodge · · Score: 0

      I was thinking it would make exploits worse because it would widen the gap between geeks and normal people, and so technical help would be harder to get for the office version. But maybe not.

      --
      The government can't save you.
  10. FUD from McAfee by Old.UNIX.Nut · · Score: 2
    "We've seen plenty of examples where an attacker will actually create their attack either in or as part of a free security tool," said Greg Day of McAfee.

    It's ironic that somone from McAfee would dog free products that compete with them. The only AV products I've found on customer systems that were disabled by an infestation were Norton and McAfee products. People running free AV and firewall products are at least as safe as those running Norton or McAfee.

    1. Re:FUD from McAfee by Tx · · Score: 1

      Never mind being disabled by a targetted infestation - I've dealt with several systems that have been crippled by Norton software itself.

      --
      Oh no... it's the future.
    2. Re:FUD from McAfee by b0s0z0ku · · Score: 1
      Never mind being disabled by a targetted infestation - I've dealt with several systems that have been crippled by Norton software itself.

      Yep, 95% CPU usage from a Norton process is always a fun sight to behold. McAfee is even worse because certain versions have a bug that causes CPU usage to go through the roof when a certain logfile exceeds a size limit. Solution is to move or delete the old log.

      -b.

    3. Re:FUD from McAfee by Tim+Browse · · Score: 2, Insightful

      I'll never trust McAfee after a friend of mine installed the trial version of their AV software.

      On day 29 of the 30 day eval, it flagged a virus as being present on his PC. Suspicious, he set the clock back to the day before, and rebooted. No virus found. Restored the clock to the day before the eval ran out, and McAfee AV found the virus again.

      Not exactly trustworthy behaviour.

  11. Is it just me? by Bryansix · · Score: 3

    Is it just me or does this guy sound like he is talking out of his ass? There will always be those "fake" security solutions out there that offer themselves for free but are actually spyware/malware. However, there is a large community of people who keep track of these programs and I can tell you that if GriSoft or the makers of ZoneAlarm started dropping trojan horses or spyware on your computer that there would be an uproar and you would hear about it. Right now it is pretty sad for the security companies that charge for their solutions. Every virus/worm that comes out nowadays automatically defeates Norton Anti-Virus or is design to escape its notice. Therefore solutions like Grisoft's AVG Anti-Virus have a leg up sometimes in defeating these problems. In addition, none of the pay solutions do anything useful to prevent or get rid of spyware. While you can upgrade Ad-Aware or Spybot, both have free versions that work great!

    I wonder how much Symantec paid these guys to write this article.

    1. Re:Is it just me? by AlgorithMan · · Score: 1

      not Symantec - the author of this fud works at McAfee...

      --
      The MAFIAA is a bunch of mindless jerks who will be the first up against the wall when the revolution comes
    2. Re:Is it just me? by Anonymous Coward · · Score: 0

      I'm with you. I read this and thought, "how long will it actually take Zone Alarm to build a firewall for Vista?" Aren't they already working on it with beta copies and developer kits and whatnot.

      I'm no OS/Security expert, but that article sounded like hype.

  12. No more free security software? by twitter · · Score: 2, Funny

    Is Bill Gates planning an invasion of Canada? I know his "Trusted Computing" initiative is designed to eliminate choices, but will that junk really work?

    --

    Friends don't help friends install M$ junk.

  13. Pure FUD by nolife · · Score: 5, Insightful

    The bottom line, according to Mr Day, is that when you download free security software you cannot be certain what you get.

    Mr Day is Greg Day of McAfee.
    His intentions are for spreading FUD. There IS bogus spyware software and virus removal tools out there. Odd thing though is some are free and some you actually have to pay for. Having a cost does not make it legitimate at all and Mr Day is stating a criteria that unless you pay for it, chances are it may be a scam. Of course this also implies if you did pay for it, it is not a scam and that is far from the truth. Instead of breaking the FUD campaign into free and paid for, it should be split into "well known and trusted" and "not well known and trusted". Mr Day does not want it to be decided on well a known and trusted basis because to reach that status takes time and effort by a company, he wants everyone to just assume his companies software is the best solution and of course that HAS to come at a price.
    Sorry vendors and computer users but these are not binary decisions and it takes some research either way. Free or not free.

    --
    Bad boys rape our young girls but Violet gives willingly.
  14. "By using ZoneAlarm..." by Tim+Ward · · Score: 0, Troll

    ZoneAlarm is itself malware. See the first two questions on this page.

    1. Re:"By using ZoneAlarm..." by The+MAZZTer · · Score: 2, Funny

      Wow, you believe what a random guy wrote on a random website? OK How about I try:

      ZoneAlarm is NOT malware.

      Haha! You're confused now!

      And as for that webpage, if the author simply didn't make their button url have the word "advert" in it it probably wouldn't be blocked by ZoneAlarm, durr. Adblock knows better than to let "advert"s though as well.

    2. Re:"By using ZoneAlarm..." by FlavorText · · Score: 1

      I have ZoneAlarm, and I see the advertise button there perfectly. So, the guy's lying.

      --
      "Yes, I do have something to hide - my shame."
  15. There's still a market - if people realize it... by RobertM1968 · · Score: 2, Informative

    It's not like Windows Live OneCare is getting great reviews by anyone who's doing a comparison based off what threats it stops and which ones it doesnt. Even Ziff-Microsoft publications rated it #7th out of 10 a month after its release.

  16. From TFA by oDDmON+oUT · · Score: 1

    "...it has also released its own security product known as OneCare. The all in one package is designed to look after your computer and all your data, ..."

    Let's hope that all they are looking at is *security* related. Blind trust so often being a really Bad Thing®.

    --
    Some days it's just not worth
    chewing through my restraints.
  17. Comment removed by account_deleted · · Score: 1

    Comment removed based on user account deletion

  18. Re:There's still a market - if people realize it.. by RobertM1968 · · Score: 1

    Shoulda included these since my post isnt a troll

    June 13 2006 - http://www.pcmag.com/article2/0,1895,1976149,00.as p

    There's also the printed mag that came out at the same time with a program by program comparison (which it was #7 of 10, scoring horrendously against many threats that #1-6 crushed it on).

  19. Re:There's still a market - if people realize it.. by RobertM1968 · · Score: 1

    Ugh... asleep at the keyboard. The 3rd part of my post was that same magazine rated AVG (free) as far better in the next issue (if you do the comparison by looking at the stats from each article - they didnt).

  20. This is not what they said by Anonymous Coward · · Score: 0

    They claim that with software that you pay for *you know what to expect*, not that it is *safer*. How you managed to confuse those two concepts is beyond me.

  21. a Microsoft 'upgrade'? No, thank you by Simonetta · · Score: 1

    I agree that there is no real reason to 'upgrade' a Microsoft operating system. MS has reached the point where they have received a sum of money for a reasonably functional operating system on nearly every PC in the world. So the only way that they have to keep their profits and stock price high is to convince everybody to buy the same reasonably functional again and again at full price. But if you remove the eye candy, is MS Vista or whatever significantly better than the OS that you bought from them three years ago? (I know you didn't, but think of yourself as the IT manager of a corporation with a few thousand employees).

        No it isn't.

        And all the weird registration hoops and hidden DRM and secret commercial links and co-sponsorship arrangements. Shit, all you have to do is look at monkey boy and you know that the only reason that he exists is to sell you as a product to all the other corporations in the Fortune 500.

        Personally I run Windows 98 on the PC that I need to have direct programmable access to the I/O ports and Windows 2000 on any other PC that I use. And when Windows 2000 stops working for some incomprehensible reason, then I will switch to Linux. Very slowly, but most surely all of the programs that I use are being converted in functionality to open-source. I'd be happy to contribute to the process, but no one needs or wants Visual Basic 6 or AVR assembler coded applications 'polluting' the open-source universe.

  22. Same can be said for retail software by DigitAl56K · · Score: 4, Insightful

    "The bottom line, according to Mr Day, is that when you download free security software you cannot be certain what you get."

    Can we not say the same for commercial software? How many people are still buying Norton Anti-virus despite it's somewhat public record because of it's brand name and price tag? What about firewall software? We've all seen plenty of reviews and comparisons showin firewall A to be better than firewall B and vice versa, but some of the best firewalls for Windows _are_ available for free (e.g. Sunbelt Kerio Personal Firewall [free version] or the rapidly developing Comodo Firewall).

    Nothing guarantees that because a product has a price tag attached it is better than any other product.

    How to find something reliable and trustworthy? The same way people have been doing it for years - identify knowledgable and reputable third-party reviewers, communities, and do a little research.

  23. Where do you think they go? by jofi · · Score: 0

    You sue Microsoft, claiming anti-competitive practices.

    --
    Blame the user, not the software.
  24. hey by Anonymous Coward · · Score: 0

    This man never heard about jetico personal firewall or he would shut up. It's freeware, light, and no commercial firewall can compete except
    maybe fprot firewall....

  25. They are going to thrive! by BCW2 · · Score: 2, Informative

    Based on the fact that Vista will have been exploited seriously before it's even released. What M$ product hasn't been hit hard in the first week of release? I still have serious doubts about the ability of anyone in Redmond to spell security, much less do anything about it!

    --
    Professional Politicians are not the solution, they ARE the problem.
    1. Re:They are going to thrive! by westlake · · Score: 1
      What M$ product hasn't been hit hard in the first week of release? I still have serious doubts about the ability of anyone in Redmond to spell security, much less do anything about it!

      When you learn how to spell "Microsoft" maybe someone off the Slashdot pages will listen.

    2. Re:They are going to thrive! by BCW2 · · Score: 1

      I used a 2 character abreviation that happens to state exactly what "small & limp" (Microsoft) stands for, anything that brings in money, whether it works or not is meaningless.

      --
      Professional Politicians are not the solution, they ARE the problem.
  26. Well the other thing is by Sycraft-fu · · Score: 2, Interesting

    MS generally provides pretty basic versions of software for their included versions. As you noted, IE is an exception, but things like the firewall, defragmenter and so on are functional and fine, but really don't compete with the stuff you can buy.

    The defragmenter is a great example. Windows 2000 and above have a built in one. It works on NTFS and FAT drives and does an ok job. How then do companies like Executive Software and Raxico survive making replacements for it? Simple: They make more feature rich versions. The included defrager does just fine when you run it, it'll clean up most of the fragmented files on the drive. However it has some major limitations. The biggest is it's not real aggressive. It just kinda cleans things up, it doesn't do any sort of placement optimization or try to prevent future fragmenting. Also it doesn't have any features to schedule itself, you need to run it manually. You can, of course, use other software to schedule it but it's a pain. It also isn't all that fast. It's clearly not very speed optimised.

    Thus we have a market for other defragmenters. Perfect Disk (Raxico's program) will do a much better job defragmenting your disks. In fact, you can tell it how you want it to operate. It can just do a cleanup, kinda like the internal one does, it can spend more time and try to intelligently place files to improve performance and reduce future fragmentation, or it can get real aggressive and try to consolidate all your freespace to further reduce fragmentaiton. You can have it create multiple schedules on different intervals, it can defrage multiple disks in parallel, you can set it to only defrag on certain fragmentation thresholds, etc.

    Basically, they made a better defrag program. Not everyone buys it, but then even when NT 4 had no built in defragmenter many peopel didn't buy one. However enough people do to keep them in business. As a die note if you play a game like WoW or Oblivion, go get Perfect Disk or Diskeeper. You didn't know your system was slow, they'll show you it was (by fixing the problem).

    Same is true with firewalls. The firewall in Vista is better than the one in XP, but both are fairly basic. Good enough to keep most people happy and something at least for those that wouldn't but/download firewalls before. However don't kid yourself in to thinking they have the features of the 3rd party ones out there.

    In most cases, you really can compete with MS's included versions of stuff because they aren't aiming to have the be-all, end-all version. They want to put something that's good enough for most people to do the basics. Defrag, notepad, the firewall, the calculator, paint, etc all have better versions available from 3rd party sources. Some are free, some are pay, some are a little better some are way better.

    Either way just because MS puts something in their OS doesn't mean your market is going away. It just means you have to make something that's more than basic.

    I don't care how secure they make their OS, short of a trusted computing model, they'll always be a need for virus/alware scanners. Why? Because most of these programs come in the front door, not the back one. What I mean is they piggy back with another program, or are run from e-mail, etc. They user gives them permission to run, in other words. So it doesn't matter how many levels of privilege escalation there is, or how well isolated components are. If the user gives that thing permission to run at a high privilege level, it can do as it pleases.

    So what you have to have is a gatekeeper. You need a program that has a list of bad programs that will warn the user "this is known to be bad, don't run it. The OS can't (barring a trusted model) know if a program is good or bad. It has to take the user's word on if it should execute something, if that user has admin access. It can warn the user that the program wants elevated privileges, but many programs need that so that doesn't do any good.

    1. Re:Well the other thing is by value_added · · Score: 2, Informative

      MS generally provides pretty basic versions of software for their included versions. As you noted, IE is an exception, but things like the firewall, defragmenter and so on are functional and fine, but really don't compete with the stuff you can buy [...] The defragmenter is a great example. Windows 2000 and above have a built in one. It works on NTFS and FAT drives and does an ok job. How then do companies like Executive Software and Raxico survive making replacements for it? Simple: They make more feature rich versions.

      Sorry, but this completely wrong. The "built-in" Windows 2000 defragmenter was Diskeeper-lite, licensed for use from (who else?) the folks at Diskeeper. Most people, when discovering the inherent limitations of their lite version (innability to defrag page files, etc.), purchased the full version of Diskeeper or opted for an alternative like PerfectDisk, etc.

      In general, the availability of certain third-party replacements for native or included tools has always been a fact of life in Windows, and indeed, is often the prefered choice. As Microsoft typically seeks out the lowest denonimator (if it works, it's good enough), it shouldn't be a surprise to anyone that included programs are no different. However, the situation is a bit more complicated than your summary suggests. Licensing is one factor. OS tie-ins are another.

    2. Re:Well the other thing is by Sycraft-fu · · Score: 1

      What's the fact that the included software was license from Executive Software (something I was aware of) got to do with anything?

      The point still stands: For most tools, MS includes a simple version, good enough to get the job done. This leaves plenty of market for those that want to produce more full featured versions for profit, sometimes including MS themselves (as in the case with Office and Wordpad).

      With defragmenters the included one does an ok job, but not a great one. Most people indeed no NOT purchase a better version. Well, unless the 3000 or so people I support aren't normal. However some do, like me (the pagefile isn't the reason I bought it, defragmenting a pagefile isn't particularly useful and is easily avoided anyhow) and it's enough to make money. As I noted Raxcio, who's software is not licensed by MS, does just fine in the market. They are who I choose to purchase from, and they are just one of many (O&O would be another example).

      Same situation with text editors. Notepad gets the job done, but that doesn't mean there's no room in the market for Ultraedit or Textpad.

  27. Free vs. Trial by fooyoo21 · · Score: 1

    So does this mean that the 30 and 90 day trials of Norton and McAfee products are filled with malware or they lower their security settings to entice you to buy at the end of the trial period? Lol!

    By the sounds of it, Once vista is released, they will cramming their sw with crap to get people to buy it just like the others will.

    Let the feeding frenzy begin!!!!!

    1. Re:Free vs. Trial by Tim+Browse · · Score: 1

      So does this mean that the 30 and 90 day trials of Norton and McAfee products are filled with malware or they lower their security settings to entice you to buy at the end of the trial period?

      Something like that.

  28. Industry-Standard Lack Of Security by Anonymous Coward · · Score: 0

    It's the end of the world for the industry for programs that fix blatant security problems in Windows because Vista will be perfectly secure! Microsoft said so! Just like when they released Windows Server 2000! And Windows Server 2003! And Windows XP! And XP SP1! And XP SP2! And Windows Firewall! And Microsoft AntiSpyware! And Windows Defender! And...

    Frankly, I can't see Vista changing a thing. Fixing security holes? Making code that doesnt suck? Assuming that's true, people are still idiots, and there's trojans out there. How is Vista going to defend against people downloading and deploying some mass-emailed chunk of evilware (or link to same)? Throw up a warning? How much are you willing to bet that if said evilware author puts up a note saying "windows will warn u about this just tell it to ignore", people will believe them?

    And on top of it all, if there's an industry wholly dependent on one company making lousy code and not doing a thing to fix it, said industry deserves to die.

  29. he fell for an old psycho-trick by AlgorithMan · · Score: 1

    in a book about psychology i read that "expensive products must be better than cheap products" is a thought that has been burned into our brains. In times of our parents and grandparents this was true (thats why they taught us that) but today it is just not true anymore

    today this thought is exploited by greedy companies that take more money for their products than comparable products cost, so people will think it was better

    I read a test once. a cheap noname dish liquid was place 1... I don't know about you, but today I buy cheap noname products. I don't recognize any difference to the expensive products and save lots of money, because I don't fall for this psycho-trick anymore...

    besides I also use linux today...

    --
    The MAFIAA is a bunch of mindless jerks who will be the first up against the wall when the revolution comes
  30. Bad journalism by Anonymous Coward · · Score: 1, Insightful

    Artcile is obvious FUD. Instead of provide information ot the public about which free security porgrams are not full of spyware, the BBC decide to blanket all free security software as unsafe, and help these companies sell their products.

    It's either bad journalism or an infomercial.

  31. correction by AlgorithMan · · Score: 1

    after reading some comments I now see that this guy didn't fall for this old psycho-trick, but is using it against his readers, because he works at McAfee...

    --
    The MAFIAA is a bunch of mindless jerks who will be the first up against the wall when the revolution comes
  32. And if you can't? by SanityInAnarchy · · Score: 1

    What if you can't infiltrate the one piece of security software? Wouldn't it be better for everyone to have that one?

    Certainly, it's better to have alternatives if there's some problem with the existing one. But I think the downside of having one standard setup to rule them all is mostly negated by F/OSS -- rather than all the security work (and all the other work) going into many separate pieces of software, they go into one.

    I am not saying there shouldn't be alternatives, but every time I hear the anti-monoculture stuff, I have to throw out a devil's advocate.

    --
    Don't thank God, thank a doctor!
    1. Re:And if you can't? by AnyoneEB · · Score: 1

      Yes, if you can make perfect security software, that would be wonderful, but, in the real world, programs have bugs. ZoneAlarm is not necessarily any better than Norton or McAfee. It may even be worse. (I don't use any of them, I wouldn't know.) The important part is it is different. An attacker cannot realistic plan for dozens to hundreds of unique system setups. You mention F/OSS, but different Linux distros can be very different, and there are plenty of classes of applications with competing offerings (KDE/Gnome/XFCE/etc., Gecko/KHTML, Gaim/Kopete). Sure, they do share most of the Linux kernel, but even there every distro has their own set of kernel patches.

      --
      Centralization breaks the internet.
    2. Re:And if you can't? by SanityInAnarchy · · Score: 1
      Sure, they do share most of the Linux kernel, but even there every distro has their own set of kernel patches.

      And when there are gaping security holes, they usually affect every distro. You don't usually see "Only affects distro x." It's not just the kernel, either. There's glibc, among other things -- we do try to share libs where it makes sense. This also means, when a fix is issued, it affects everything.

      The point is, the kernel gets closer to bug-free every day, and fixing a bug in the kernel fixes the same bug everywhere. And by the way, there are apps with relatively perfect security, some that you can pretty much mathematically prove are secure, and some that have simply been out so long without problems that... Take something simple, like DNS. Is there really going to be a security flaw in djbdns? Somehow, I doubt it.

      And if you continue along this line of thinking, there are whole classes of security flaws that really should not exist. Take buffer overflows. There are two or three ways to patch your kernel to make it difficult or impossible to exploit an appliaction buffer overflow for anything other than DoS, if that. Or use a language that doesn't allow buffer overflows -- a language which includes bounds-checking on everything anyway.

      Diversity is good, but not for reasons of security. And it also comes at the expense of portability for normal apps. That is, if your distro is so different that a [virus|worm|trojan|spyware] isn't portable to it, then you're probably going to have problems porting your normal apps to it. Or what is it that makes malware especially difficult to port?

      --
      Don't thank God, thank a doctor!
    3. Re:And if you can't? by AnyoneEB · · Score: 1

      Very true, a lot of lower level stuff is the same and shares patches. I was more thinking of the GUI applications that a user would be using. Even there, say, a media player, is probably using the same back-end code to play a video or song no matter which media player you are using (if it's a video, probably ffmpeg). (Hey, they could have buffer overflow bugs.)

      As I understand it, buffer overflow checking is not done everywhere because it is slow and sometimes the programmer can be sure that there will not be an overflow. On the other hand, using bug checking tools like the one mentioned a few days ago being used on FireFox is a good idea. Either that or having a language/library designed such that you have to explicitly request no checking in the cases where it is safe and speed matters.

      Portability is currently handled by distro maintainers. I assume they are mostly just setting the right compile options for where files go and possibly editing the code so those options exist. Malware could be confused by a different directory structure in a different distro. (Different processors are also a possible problem for malware, but nowadays almost everything other than high-powered servers are x86/amd64.)

      --
      Centralization breaks the internet.
    4. Re:And if you can't? by SanityInAnarchy · · Score: 1
      Portability is currently handled by distro maintainers.

      This is true. It's also not nearly as bad as it could be. I can still download a binary build of Doom 3 or Quake 4 and run its installer script, and have it pretty much just work on any modern distro, x86 or amd64. Gentoo provides an ebuild for convenience, not because it wouldn't ordinarily work.

      Malware could be confused by a different directory structure in a different distro.

      Maybe, maybe not. Distros tend to be converging on directory structures, so it depends on what you're trying to do. For instance, if you want something to run at boot time, different init systems will confuse you, but Gentoo is the only Linux I know which uses anything terribly custom.

      I mean, yeah, they'd have problems with GoboLinux, but really, does anyone use that?

      (Different processors are also a possible problem for malware, but nowadays almost everything other than high-powered servers are x86/amd64.)

      That's not true at all (there are other things than desktops and servers), but it seems mostly true on desktops, so ok. But even different archs isn't a huge deal. Imagine malware written as a shell script. And there have been cross-platform worms, at least as proof-of-concept -- you detect what kind of machine you're about to infect, then send the binary that works there. The payload is the versions for everything else, plus whatever else you want to do with them.

      And again, the easier we make it to port apps -- a requirement for having enough meaningful diversity for any of this to matter -- the easier it will be for malware to be portable as well. People joke about wine being malware-compatible -- that seems a bit harder, because Wine creates its own little environment, and to go outside of that, you have to realize you're running in wine and plan for it. But remember what I said about shell scripting? Imagine the same thing, only for C# programs. When Vista rolls around, the difference between a .NET program and a Windows binary won't really matter -- they're all .exe files anyway. So the more compatible mono is, the more likely the malware will be able to do what it wants to do on whatever OS you run it on, on whatever arch, attaching itself to other "assemblies" on the system...

      --
      Don't thank God, thank a doctor!
  33. Please stop. by SanityInAnarchy · · Score: 1

    This analogy is inherently flawed. Computer "viruses", or worms, or whatever you want to call them, have no more reason to be arbitrarily limited to one OS than any other piece of software. If there was any real competition among them, we'd see this a lot more.

    Besides, MS already does this. It's called Home edition and Professional edition, and the same malware works across both. Certainly, if they want the software to be compatible across different Microsoft OSes, the malware will be, too.

    --
    Don't thank God, thank a doctor!
    1. Re:Please stop. by Locomorto · · Score: 1

      You do realise that theres effectually very little difference between the two? And yes, writing a cross os virus is much harder then you seem to think.

      --
      Stopping Content Restriction Annulment and Protection means not calling it DRM.
    2. Re:Please stop. by SanityInAnarchy · · Score: 1
      You do realise that theres effectually very little difference between the two?

      Yes, I do. I don't imagine that you making them wildly different will make it that much harder.

      And yes, writing a cross os virus is much harder then you seem to think.

      Well, if there ends up being very little difference, then it will probably be much easier than I think. But do you say this from personal experience? If not, can you give me any reason more specific than "it's hard"?

      --
      Don't thank God, thank a doctor!
  34. They can bray like asses for all the good it does by popsicle67 · · Score: 1

    I know I can trust my free solution for AV and firewall protection. It's called using a Debian powered p3 box as a proxy. I had two Microsoft Updates fail because the scanner didn't trust them so it must work right.

  35. You're full of FUD. by SanityInAnarchy · · Score: 1

    I'm sorry, were you trolling, or are you actually this deluded?

    If Microsoft was good at software development, why do so many of their products suck so much? I'm not talking about feature bloat, I'm talking about unneccesary bloat and major security flaws. Why can even the tiniest browser beat Internet Explorer at security?

    Small 3rd party products are loved because they get the job done, not because they're only used by people who need them. Or are you implying that we like our third party stuff because we can get a small app, dedicated to exactly what we want? True enough, but what's stopping MS from splitting their apps up into smaller, more flexible pieces?

    And we don't always choose open source for that reason. Eclipse is huge, bloated, and slow, and packs way more features than any one project will ever use, and there's still and addon structure for it. But people prefer eclipse because it gets the job done, better and faster than the competition.

    Now, why do people prefer pretty much any antivirus solution under the sun to McAffee or Norton? Answer: they both suck. By disabling McAffee, I immediately noticed a speedup of about 20-30 times what it was. My roommate had Norton instead, and it constantly killed the games he was playing, or alternatively lagged the crap out of him -- in a 2D RPG! He had to interrupt his game every 20 mins or so to kill Norton.

    And consider: OS X somehow manages to be very, very usable to geek and newbie alike, without actually getting too bloated. I'd argue the same about Linux, but your average newbie will believe me about OS X, and really, it's true of both.

    --
    Don't thank God, thank a doctor!
    1. Re:You're full of FUD. by bendodge · · Score: 0

      While you may be right about OS X, I do believe that part of why Windows is very successful is that is very flexible. Not nearly so much a Linux, of course, but compared to OS X. You can just plug new hardware in and have it work, or you can install an SDK. Why do most developers use Windows, instead of making Windows stuff on a Mac, or on Linux?

      --
      The government can't save you.
    2. Re:You're full of FUD. by SanityInAnarchy · · Score: 1

      To answer your rhetorical question, it's not because Mac or Linux are worse development platforms, but that people are trained on Windows and MS Visual Crap, and because cross-compiling can be hard. It may actually be easier to develop a Windows app in Windows. Then there's also the question of why do most people use Windows in the first place?

      Not to mention, you need a Windows box to test on. Unless you're going to make the app cross-platform, you have to test it as a Windows app, which means either Windows or Wine. Wine may not work as well as you'd like, and virtualization seems like a huge waste, especially on a development box, since most development tools (open source included) are huge and bloated, and will easily soak up a gig of RAM for no apparent reason.

      On OS X, I frequently have the experience of plugging in new hardware and having it work, to the extent that I can plug in new hardware (a camera, a USB drive), whereas on Windows, sometimes it's that easy, and sometimes you need a driver download, and often you need to install the hardware vendor's crap software just to get the drivers.

      However, I have noticed people switching to Mac -- people who are sick of being a Linux guru and wanting their stuff to just work, and people who are sick of dealing with Windows [in]security and [in]flexibility issues. It's the best of both worlds to a lot of people -- under the hood is a powerful Unix, but stuff just works, and more often than on Windows. Sadly, their Unix is crippled, and their shiny interface can be a bit inflexible at times, and to top it all off, the xcode-users list is full of people who mostly hate to be reminded of the Unix under the hood, and hate that xcode requires them to learn a bit about the commandline from time to time.

      --
      Don't thank God, thank a doctor!
  36. I partly agree by Anonymous Coward · · Score: 0

    I personally don't trust ANY software, especially the "free" stuff, no matter whose name is on it. It's hard to find anything (even for money) that doesn't include at least a little bit of garbage-ware...

    The only exception is properly peer-reviewed open source. After enough people have seen the code, one can be pretty sure there's nothing "extra" in there.

    As far as security software, I think OSS is the only option. If everybody has access to the source, and it still isn't broken after some time, then it probably doesn't have any huge holes in it.

  37. hahahah by navtal · · Score: 1

    hahahahahahahahahahahahahahahahahahahahahahahahaha hahahahah....HA! Yes! Of course microsoft will release an operating system that is compltly secure and will not need third party support..and...ummmm.....ya...compltly secure...hahahah

  38. Protection from who again ? by btk667 · · Score: 1

    OK, now, is Microsoft protecting itself from external threat or protecting it's monopoly?

    On a side note I had difficulties installing ZoneAlarm on Windows XP SP2. These was (seems) to be a conflit between the firewall of Zonealarm and the one in WindowsXP.. ( No network connection was possible) Anyway,

    It is a GREAT idea to isolate IE from the core of the OS. But I should be able to use the Firewall i want (Either the free or paid one.)

    Hargh, it's no use.. Please MS, continue to put barrier and block etc etc.. At least more and more people with understand what you'r up to and will start using Linux (Any distro will do fine)
    For more information on alternative please see: http://distrowatch.com/

  39. You mean like Symantec... by queenb**ch · · Score: 1

    Yeah, I think Symantec showed us just how safe the software we buy is.

    (open sarcasm)
    That Norton Security Suite didn't have any spyware or anything built into it. It didn't basically root kit everyone's machine that installed it.
    (end sarcasm)

    I'm all in favor of the open source guys. I run ClamWin on several machines. I've found it to be reliable and quite effective. I keep hoping that they'll release an enterprise type console where I can force updates, force scans, and lock users out of their settings.

    I'd really like to see something similar from the open source community for a firewall product. I don't trust the Collective to make good choices for me, so I'd be pretty open to turning off Windows Firewall in favor of an open source product. While I don't make a habit of perusing source code for such things, it's always nice to know that you can so that you can avoid another Symantec situation.

    2 cents,

    QueenB

    --
    HDGary secures my bank :/
  40. M$ because BASIC is basic to Microsoft's success by tepples · · Score: 1

    So you criticize use of M$ to represent "Microsoft". The name refers to Microsoft's roots as a developer of implementations of the BASIC programming language. Microsoft's first products were BASIC interpreters for several 8-bit microcomputer platforms, notably including the Altair and Apple II. In fact, BASIC is the product line that Microsoft has continuously produced since the company's inception (Altair BASIC to Applesoft BASIC to GW-BASIC to QuickBASIC to QBasic to Visual Basic to VB.NET). Versions before QuickBASIC used line numbers, and the name of every string variable ended in the character $. The following is a valid program in the most famous Microsoft BASIC dialects:

    10 LET M$ = "Microsoft"
    20 PRINT M$" is a convicted monopolist."

    I see use of "M$" in Slashdot comments as analogous to use of Perl/PHP substitution ($DEITY). Do you also complain about shell globs (*n?x) and sed commands (s/to much/too much/)?

  41. Re:They can bray like asses for all the good it do by tepples · · Score: 2, Informative
    I know I can trust my free solution for AV and firewall protection. It's called using a Debian powered p3 box as a proxy.

    You mean "free" as in speech, right? How much did the P3 box cost, and how much does its electricity cost over its lifetime? Many installations, especially in homes, would do a better job with a firewall/router/NAT appliance with a built-in 100BASE-TX switch and 802.11b/g access point.

  42. you cannot be certain what you get by l3v1 · · Score: 1

    you download free security software you cannot be certain what you get

    Because when he buys that software for a price then he can be certain what he'll get ? I won't even go on with that.

    Thing is, whatever good firewall and antivirus and whatever else Vista might contain, I'd rather trust a company with a long record of producing good firewall [etc] software than what MS will include in there. If he so much emphasizes the "trust" part of this whole thing, then the question is [falsely] seemingly simple: which company you trust more [well, if you trust any company, that is]. For me, just because MS thinks he should include a firewall and other protective tools, is not enough reason to drop those product which I've been using for some time and which have proven to be trusworthy. And I won't list them with purpose, since this is not about one particular product or the other.

    Regarding MS, "trust" is not a word that is any near of the top of my list. Yes, this is my own feeling. But I'm not alone with this, and that's exactly why security companies will have a chance of survival.

    As always, when "competing" with MS [see, that's another isue brought alvie by MS PR, that whatever anybody comes up with, has to be in competition with them] those companies had the most chance that concentrated on specific issues rather than being everything everywhere like them.

    Some [most] of av and fw software already have Vista-running versions, even my favourites have and I use them when I try the latest beta. If Vista's included tools will someday prove to be at least so effective than these tools, I might consider dropping them. BBC or MS PR is just not enough.
     

    --
    I am putting myself to the fullest possible use, which is all I can think that any conscious entity can ever hope to do.
  43. Interesting FUD by Tjp($)pjT · · Score: 3, Insightful

    Most security software that is downloaded comes with checksums you can and should check. That way you do know what you download is what you expect.

    --
    - Tjp

    I am in wallow with my inner money grubbing capitalistic pig. ... Oink!

  44. It has happened before ! by Mr+Europe · · Score: 1

    The same concern was when everyone was waiting for the Win 95 to be released. The future of the anti-virus companies especially. We all know what really happened.

  45. Re:a Microsoft 'upgrade'? No, thank you by Jarnis · · Score: 1

    Sadly if one of the major uses for the PC is gaming, 98 is obsolete, and 2K is starting to have some (rare) issues - mostly due to braindead programming or deliberate 'breaking' of apps to require XP. So for gaming, currently you have to have 2K or XP, and XP has less 'oddball' issues without any real drawbacks.

    And in the future, with DX10 getting no backport, you will either get Vista, or scrap PC as a gaming platform.

    I have no hurry to swap to Vista - it's still unfinished and probably will need it's fair share of patches and fixes post-launch before it becomes usable. However, Microsoft will make sure it will, in the end, be mandatory for gamers. I just hope most stupid bits are fixed by then, essential applications have catched up, and any builtin drm crap neutered by third parties.

    And yes, I agree that x64 version, with it's compatibility issues and draconian driver signing regime is basically DOA. Unless Microsoft changes their policy before launch, it will set back adoption of 64bit Windows back another 5 years or so. Things just won't work - hardware developers can't be assed to get signatures, and will just ignore 64 bit version, and applications requiring low level access (firewalls and DRM workarounds come to mind) will just not work, driving userbase to ignore the whole crap.

    What will be interesting is the NEXT version of Windows, whatever that might be. 32bit Vista, while it does change the defaults towards taking (some) control of the system away from the average user, it still is possible to reconfigure it to keep the user at the driver's seat. Yes, some bits of kernel are being walled off in the name of security, but as long as unsigned code can be loaded at 'root' level (drivers and similar bits), there are ways around it. They may be convoluted and cause pain for, among other things, firewall developers, but the system isn't locked down in this regard.

    Vista's x64 version on the other hand has the first bits of "I'm sorry, mr. Bill Gates and his borg collective say you can't do that" included with mandatory driver signing and other 'security' around the kernel, and it's obivious in the future MS will continue to try to push users down that slippery slope, until some day we need to get MS's approval to do anything on _our_ computers.

    x64 Vista is dead as a doorknob as general purpose OS, but it's successor may be the tipping point where you either install Windows and give control to MS, or you install something else and actually get to decide what your computer does. In the meantime, 32bit Vista is coming, and for the most of the computer users of the world, you most likely have to adapt. OEMs will make sure of it, making XP 'vanish' off new computers as soon as it's feasible.

    It will be interesting to see the mess with 32bit vs 64bit Vista on OEM systems. One would imagine MS would push the installation of x64 version on OEM systems with 64bit CPUs (umm, basicaly all of them?), but if the OS refuses to work with lots of very common stuff with no way to fix them (say, Daemon Tools and similar programs relying on low level access come to mind, plus lots of hardware with no signed drivers), the OEMs have a support nightmare on their hands... Can't wait to watch THAT trainwreck over the next year or so.

  46. No surprises there... by Anonymous Coward · · Score: 0

    Naturally, this artcile, and the comments in it, are made by someone who has a vested interest in (guess what) .... paid security software.

    Duh!

    Well, this alone puts me off that company. If their spokesperson lacks integrity, to misreport the market for his own gain, then I have to ask the reverse question... why on earth should I buy products from them when others act with more integrity?

  47. Pfft... by Tinned_Tuna · · Score: 1

    Just Get Linux. Or Mac. Or *BSD. Or anything that has less security holes than swiss cheese. Microsoft products boast that they are 'secure' but security cannot be claimed, look at WinXP, they said that was secure, but today we know it has more holes than aluminium pits on a pressed CD.

    Microsoft should stop calling their products secure, even the networking stack is screwed. To anyone who upgrades within the first two years, I blissfully stand, point and laugh.

    Note, FC5, Ubuntu 6.06, Mac OS X and OpenBSD all have firewalls as-standard. Did WinXP when it first came out? Nope. I'm gonna ask when Microsoft will implement a 'critical' feature that the FOSS community comes up with that secures sooo much stuff (I'm thinking SELinux, ELF, or other low-level protections here).

    Anyone who tells you Windows is secure by default has no place in the IT community. They'd be better off bashing their heads against brick walls until their brain's left a stain.

    1. Re:Pfft... by Anonymous Coward · · Score: 0

      Ubuntu 6.06 does NOT come with a firewall. It comes with a WAY better approach: not to have open ports to the Internet. Why the heck do you need to have around 12 open ports on a XP install if you're not sharing anything??

  48. Proof is in the pudding Re:Paid software safer? by Black+Copter+Control · · Score: 2, Informative
    "... to the extent provided by applicable law" .... if you pay for a license you get some kind of protection for your money.
    So, how many people do you know of who have successfully sued Microsoft for selling them broken software?

    I've pretty much lost track of the number of people who think that AVG Free is faster and more effective than Norton's. -- and, of course we all know that OpenBSD can't hold a candle to Windows for security holes.

    Even if you could successfully sue MS for $selling you broken software, if you're looking for security (rather than a scapegoat), you're still better off with the the better software than trying (with varying success) to point the finger at the owners of a more expensive (but less effective) product.

    A pretty package doesn't indicate the quality of the product -- only the quality of the packaging -- and sometimes not even that.

    --
    OS Software is like love: The best way to make it grow is to give it away.
  49. Stephen Lamb's Question by NOT+Rich+Allen · · Score: 1

    'do I want third parties, other than the manufacturers of the kernel (the core code of a computer's operating system) that I'm using, making changes to that?'
    Well, when the manufacturer of the kernel has a 20-year history of not being able to protect it even half as well as third-party vendors...
    ...yes.

    --
    Launch every sig!
  50. According to Microsoft by Anonymous Coward · · Score: 0

    Vista is more secure AND has security software built in so you don't need third party security software. Free or otherwise.

    AND if you want even more security, Microsoft will sell you that also, for relatively cheap and who knows their software better than Microsoft?

    Security is dead. Long live DRM.

  51. just wondering.. by it072222 · · Score: 1

    every system have their own abilities and disabilities. just support them to do the best nextime..is for our own sake too.. ---- Windows supporter.. :p