Slashdot Mirror
Vista Designed to Make Malware Easy
SlinkySausage writes "Trojan horses masquerading as 'cracks for Vista' are starting to appear on pirate boards. More worrying though, Microsoft has confirmed that Vista's image-based install process is designed to allow third-party software to be slipstreamed into the installation DVD. Great for corporate deployment of Vista with software pre-installed, but also a huge benefit for malware writers, who can distribute Vista images with deeply-rooted malware."
Pirates risk getting malware with their downloaded Vista. Is this a problem?
This article is just dumb. You can make custom Linux images with custom software also. If you download a random Vista ISO and install it, you deserve what you get, just like you would if you download a random Linux ISO.
And if you use an official installation image, that you've properly licensed, you'll know exactly what you are getting.
Now if someone wants to download an third-party image for something they haven't paid for, and gets stung with malware, how on earth is this Microsoft's fault?
What, the, fuck?
So you can customise the install disc yourself and slipstream software into it? Surely that's been possible with every single distro of Linux for the last few years or so now? Could put malware into a custom Ubuntu CD, couldn't you? Not a new thing.
More to the point, unless you download your version of Vista from some obscure warez site, it's very unlikely to have malware slipstreamed into it; UNLESS YOU PUT IT IN YOURSELF.
Just because something has the capability to have malware put into it does not make it bad. This is a stupid fuss being made of nothing. I'd say I expect better from Slashdot, but considering the number of Microsoft/Zune/Vista bashing troll articles that are getting posted these days I'd be lying.
By summer it was all gone...now shesmovedon. --
What's the point of this article? If I download illegal cracked versions of a commercial Microsoft OS, something bad might happen? And somehow that's Microsoft's fault? If someone did the same thing with a RHEL install ISO, would that be Red Hat's fault?
This smacks of the same FUD that Microsoft tosses around about Linux and other FOSS. Let's stop stooping to their level.
No sig, sorry.
Getting malware when downloading a crack is always a possibility, yes.
However, this entire story smells of FUD - this is one of the oldest arguments software vendors use to scare people away from pirated software - "All pirated software has viruses in it! Don't use it, it'll make your computer blow up! Make sure your copy is legit!" It's a valid argument, and they have every right to defend their products from piracy, but I suspect it is often overstated.
Then take this article's headline - "Vista Designed to Make Malware Easy". We've gone from fact (one Vista crack was found - and caught by people downloading it - with malware in it), to speculation during an interview, to an entire Slashdot headline. Good good. The relevant part from the interview:
Finally, if the above headline is correct, then how is it different from "Linux Designed to Make Malware Easy"? Anyone can bundle a rootkit with a Linux distro and put a torrent of it up somewhere. Heck, it's even easier, since Linux is free and open to start with. The bottom line is, if you're not getting your software from a trusted source, then you have no reason to trust it.
I'm gonna go lie down for a bit until the spinning stops.
ClutterMe.com - easiest site creation on the Net. Just click and type.
Vista isn't designed to make malware easy, it's a problem inherent in the design. When I read the headline I thought "Microsoft wants it easy to distribute malware?" But when I read further, it's just another misleading headline on slashdot.
1) People run insecure machines. 2) People leave computers on. 3) People leve them coennected to the internet.
Break any of these three links in the chain and you'll fix bot netting. (1) is impossible, given V1.00-beta humanity. But surely, (2) and (3) are pretty easy to achieve. For Joe Sixpack, there is no benefit in keeping a PC running 24/7, except that it helps contribute to the power bill and rolling blackouts.
Servers, of course, are a different matter but they are [hopefully] better administrated.
Engineering is the art of compromise.
If you're legit, the chance of running a bad install are zero.
But Windows still allows you to run ANY program you download. And this affects legit users too. Why isn't anybody talking about this.
I think it's about time Microsoft forbids running programs on Windows, or malware will have an edge.
You really don't have anything to worry about, because the EULA forbids making ISO images of the consumer editions of Vista.
:D
Right?
The Christian Right is Neither (Christian nor right). See: Matthew 23, Matthew 25, Ezekiel 16:48-50
That is a great piece of fiction from the Microsoft Employee Manual the OSS response section. I loved that one and the family that get's broken up over Redhat..
In reality, Grandma will find it just as easy as Microsoft OS. Email will work, that virus she tries to click on will not run and every website she goes to cant install spyware. Grandma is not going to rush out and buy UT2007 to get some deathmatch smackdown with her homies. She will simply use the computer as it is. Photos are easy to view and open from relatives and friends. This magical Open Office reads all the documents she get's sent even from wierd uncle al that uses that Wordperfect software.
Reality, Grandma get's ubuntu, and a little bit of training as to where the apps she needs are and looks like and Grandma will need no extra help from now on.. Just like giving her a MAC.
That is the reality of what will happen, but I like you really love telling the stories there in the MSFT employee handbook. Hey, check out the section on debunking Programming in anything but Visual Studio! It's a HOOT!
Do not look at laser with remaining good eye.
No, you are incorrect. I am not pro-MS, I am not anti-linux, I am just a pragmatist. I was, in fact, speaking from personal experience, although with generic friend-of-a-friend OAPs as opposed to ones I am related to.
Yes, she will probably find it just as easy as a Microsoft OS - but it will be different. It will be different to her, and different to anyone else she might ask for help, and that's the problem.
In the past I have been quite eager to suggest to people to install Knoppix (and later Ubuntu) when I got called in because their hard drives failed or when Windows ME/XP got so clogged with malware that they couldn't do simple tasks such as open the filer. However, it became a nightmare to support them - by the time I was at university I'd be getting called several times a week with one problem or another. But I couldn't send them to someone else - there wasn't anybody else who had linux experience.
You say that she would need no extra help from now on. Have you ever actually met an old person? They're not like us. They're slow. They're senile. They're virtually dead. It's a miracle they can remember how to turn the machine on in the first place. Even if you write them out detailed bullet-point instructions with screenshots (which I've tried) they still manage to get it wrong. This happens with Windows, it happens with Linux. Sure, I've come across a few who have taken to computers and haven't needed any help past the first few days, but in my experience the majority will always need someone to hold their hand. Hell, that bit's not just limited to OAPs, most people I meet over 50 seem to have that same problem.
In your rush to flame me as an MS fanboy, you seem to have completely missed the key point in my original post - sure, little Johnny might be able to train her up in how to use it, but she will always have problems and questions. She will always want to learn how to do something new with her expensive toy, she will always want to fiddle with things, and she will always get confused. She will always need help. And by installing an OS that most people don't have experience of, he'd just be tying himself into supporting her until she dies.
I love Linux, I run my business on top of it, I tell my friends to use it. Software compatability is a minor issue, re-training is a minor issue. But when it comes to installing it for someone else, the deal-breaker is that there is no wide-spread support readily available for them yet, so I'm stuck helping them until they die, or until I reinstall Windows and can palm them off onto someone else.