Slashdot Mirror
Windows Live OneCare Can Eat Your Email
FutureDomain writes in to point us to a blog sponsored by PC Magazine, reporting about another problem with Windows Live OneCare. Apparently, it sometimes deletes the entire Outlook or Outlook Express .PST mailbox when it finds a virus in one of the messages. The only solution is to tell OneCare to exclude the entire Outlook mailbox. This is the software that came in last in antivirus tests. The trail of tears is ongoing over on the Microsoft forums.
isnt the term 'trail of tears' a bit extreme for some lost email?
And just remember, this is the same development house that the whole world seems to have no problem with the thought of giving root acces to their machines so they can keep them 'safe.'
If those idiots don't screw the world up by their own incompetence first they are going to get Windows Update 0wn3d and allow someone malevolent to wreak even worse havok on the world.
Seriously, I can't understand how any Microsoft product is permitted to be used in any role where failure isn't an option. Finance, military, medical, etc should have imposed a ban a decade ago, forbidding the stuff from even being connected to a network port inside the secure inner firewall. Instead we are installing the stuff into the engine room on our warships, giving it sole control of the propulsion system.
This is insanity on a global scale. A lot of people even seem to understand the danger yet are too afraid to speak up loudly enough to be heard.
Democrat delenda est
Don't just sit there feeling smug! Every now and again, when you have a free moment, delete your mbox file, or the directory where the mail client of your preference stores its data. That'll go a long way towards helping Windows users to stop seeing us as arrogant and aloof and let them know we share their pain.
(And if you're really feeling altruistic, knock up a shell script which turns your machine into a spam-spewing zombie).
Nuke the mailbox from orbit, it's the only way to be sure.
Some people become attached to their collections--no matter what the collection is. It is psychologically difficult for some people to face the reality that some things are simply not worth saving.
I advocate a training program for those people: once each year they should practice archiving everything they might ever want to save to one CD. Just one typical data CD. Not a DVD. One single CD. Anything which doesn't make it to the CD is random number filled.
the NPG electrode was replaced with carbon blac
Maybe it wasn't such a good idea to put all mail, including not only INBOX but also all extra folders, in a single file?
At least other MUAs usually have a separate file for each folder.
Then, get a good AV package - or better yet, just exercise some fucking common sense and don't open that "Re: Malaca Superfund Stranded" email from "Roberta Plantagenet~=%" that has a "postcard.exe" attachment.
Ahh, nice a inbox ya got dere, it'd be a shame if somethin was to happen to it!
I lost my sig...
That theme seems to be "The cure is worse than the disease"
Example 1:
Problem- Malware has carte blanche in XP to do damn near anything if it's run from an account with admin privileges.
Solution- UAC in Vista. ("You are moving your mouse cursor. Cancel or allow?")
Solution Sucks Because- UAC is so friggin' annoying with the popups that people will either shut it off or get in the habit of blindly clicking "OK," which means they are likely to give malware carte blanche to do damn near anything.
Example 2:
Problem- Viruses.
Solution- Windows OneCare Antivirus.
Solution Sucks Because- One infected email can cause your whole inbox to go bye-bye.
Great job, guys! The five years it took you to get this stuff perfect was really worth it!
Yes, this is off-topic. Yes, OneCare sucks if it deleted someones email.
If you don't backup your data you will lose it someday. It's not a question of "if" it is "when". Your hard drive will eventually crash!
I feel so sorry for people that encounter this. My business provides remote backup via the web & we try to help people prevent events like this, but it doesn't matter. I think all of our remote backup customers have previously experienced data loss.
I've had Norton Anti-Virus delete my Thunderbird Inbox when it detected an incoming virus. This was the main thing that made me get rid of Norton on all my computers.
Life is like a web application. Sometime you need cookies just to get by.
The term "Defective by Design" was specifically invented to describe products containing DRM, where the usability of the product is intentionally compromised in order to protect the profits of a third party.
Yes, Microsoft has a lot of DRMed software, with Vista being the granddaddy of them all, but not everything Microsoft makes is defective by design. And in this particular case, the defect appears to be a bug rather than intentional anyway. So, please, save the "defectivebydesign" tag for situations where it's really warranted. Sure, it may be an amusing term, but when you use it where it doesn't apply, it waters down its meaning for the situation it was intended to be applied to: DRM.
use Thunderbird instead....
> Quick! Someone post some linux evangelism there!
Yes Linux has a better record. But then so does everyone else. Go ahead, name the operating system with a security record equal or inferior to Windows over the last decade.
*BSD? Nope, even if you exempt OpenBSD *BSD has a far better record than anything Microsoft has released in the past decade. And OpenBSD wears the crown when it comes to security. Usability, scalability and such are legitimate counter concerns though and explain why OpenBSD hasn't conquered the world.
Linux? Regardless of the distribution, if it is a large enough operation to keep up with the torrent of errata teh universe of OpenSource/Free Software generates they have all done better then Microsoft when it comes to timely updates. And with the bonus of the existence of "Enterprise" distributions for a good part of the decade that focus on errata updates that won't have unrelated breakage.
Apple? Their record with OS 8 and OS 9 beat Microsoft and OS X just upped their game.
Sun? HP? IBM? Please.
I'm not saying anyone should be proud of their security history and methodology, all software currently sucks ass. But since we have to use something NOW the question is why is the worst vendor on 90% of the world's machines?
What I'd like to see is a major concerted effort to raise software quality over adding new features. Engage the CS departments in teh universities to have all students audit some code. After all, most operating systems these days allow access to the source. And auditing real code would be a good experience for em. They would see first hand how wretched much of the code actually in use is firsthand. And if legends are writing that stuff they just might listen a bit more when when the prof is badgering about not hotdogging in the belief they are too leet to make those 'idiot' mistakes.
And for the Linux world I'd like to see the major distros come together to take every package not currently at 1.0 and finish em or dump em. Then stabilise the codebase, audit the crap out of it and then freeze them, only accepting bug fixes. And a nice side effect is they would all have the SAME version. The original project can still release new versions but it won't get integrated into a major stable distro until they announce a new feature complete and AUDITED version. Seriously, is there anything else that needs to go into glibc? So why not stabilize it, sudit it and then freeze it? We need a trusted core that we don't have to update several times per year. As computers become central to our civilization we need them to work a lot more than we need shiny new features.
Democrat delenda est
The problem is not that a single email was moved, but that the entire mailbox was quarantined and that the user was not told about it. RTFA.
OneCare - from the same onomatopoeic geniuses that thought up the "Wang Cares" campaign?
AVG free move the concerned attchment to a quarantine directory and leave me a note telling me why in the email. My whole mailbox is file left untouched. So why is microsoft unable to do that ?
C. Sagan : A demon haunted world:
http://www.amazon.com/gp/product/0345409469/
visit randi.org
Precisely. For that matter, considering the target audence the concept of a Log file as notification is not only ineffective but probably offensive to most. Of the people I know who might use this product, every single one of them would have ended up in a shop and paying a lot of money to have a tech figure it out. Or more than likely paying them to re-install Windows and hope it didn't happen again.
Platform advocacy is like choosing a favorite severely developmentally disabled child.
From the forum posts, it seems that MS don't want to scan incoming or outgoing emails and they also now don't want to scan the .pst file. They are happy for dormant viruses to exist on your machine because these are supposedly detected when being executed. Going by their current track record, I wouldn't be confident of any kind of protection from Microsoft 'Once Cared'.
Of course, many modern viruses send the mail from an infected machine, from someone you know, sending viruses to the accounts of addresses on that machine. The approach has certainly been around for decades and remains in wide use.
And Microsoft taught people, for years, to click on random URL's in emails and random attachments to get all those "features". So your advice to "modern users" is in fact in diametric opposition to Microsoft's historical policies, and is in fact impossible to meaningfully. It's frankly easier to not send attachemnts and always send URL's, except that Microsoft's history of auto-flagging URL's as clickable links has encouraged people not to actually check the contents of the link, but to assume it's usable. It is, in fact, Microsoft's own fault for adding "features" in the face of glaring security holes.
Maybe you'll start backing up your important data too?
Christ, what a bunch of idiots, especially the 'business' folk without a backup regime.
Does anyone remember Rav antivirus?
It was a very good antivirus program developed by Gecad, a romanian company. It had support for Linux, BSDs, Solaris and it was highly appreciated in its days. It's so sad that Microsoft killed this fine product, removing support for rival platforms and turning it into this lame thing called Onecare.
We often refuse to accept an idea merely because the tone of voice in which it has been expressed is unsympathetic to us
so effectively this means, that one care is everything but enterprise ready...
/troll
or can you imagine a serious company (serious companies don't give admin access to their workers) to send a technician to EVERY WORKER who just RECEIVES an email with a virus infected file to recover his inbox from quaranaine?
hey, why not piss off vista using companies by sending emails with attatched virusses (or was the plural virii?) to all their workers? man, if every worker loses all his emails multiple times or technicians have to be sent to every worker over and over again........ this might get LOTS of comanies REALLY mad and they might ditch vista and give linux a try - or at least other companies that stick with XP so far might hear of this and back off from a switch to vista...
The MAFIAA is a bunch of mindless jerks who will be the first up against the wall when the revolution comes
not a problem ;-)r us/article.html
OneCare doesn't ever find virusses anyways - so this is just a theoretical danger
http://www.pcworld.com/article/id,129521-c,antivi
The MAFIAA is a bunch of mindless jerks who will be the first up against the wall when the revolution comes
The email is Quarantined - meaning you can get it back unharmed - not Deleted.
This is being misreported all across the Web even though the linked article in every case makes it clear.
It's a serious flaw certainly and still more bad press for Vista, but this one is not nearly as severe as issues like DRM and Certificate-only drivers in Vista - it doesn't deserve the same level of press.
Delete entire inbox, Cancel or Allow?
~Cancel~
Delete entire inbox, Cancel or Allow?
~Cancel!~
Delete entire inbox, Cancel or Allow?
~Cancel!~
~Cancel Failed, deleting inbox~