Slashdot Mirror


Microsoft To Offer Free Anti-Virus Software

Dynamoo writes "The good news is that Microsoft have announced free anti-virus software for consumers, dubbed Morro, available late next year. The bad news is ... well, exactly the same. Although Microsoft's anti-malware products are pretty good, this move could drive many competitors out of business and create a dangerous security monoculture; major rivals will be lawyering up already. On the other hand, many malware infections could be prevented even by basic software. So is this going to be a good or bad thing overall?"

448 comments

  1. re Hard to decide ... by jelizondo · · Score: 5, Interesting

    If it comes free with the OS it will drive away competitors because Joe-sixpack is
    not going to spend any money to replace something he got for free, even if it sucks.

    On the other hand, if any feature needs to be part of the OS is precisely a form of
    protection against malware.

    Come to think of it, if MS does a bad job of protecting PCs and drives away
    competition on virus protection, maybe the company will finally implode and let other OSes
    get a greater market-share.

    --
    Be very, very careful what you put into that head, because you will never, ever get it out. - Cardinal Wolsey
    1. Re:re Hard to decide ... by dnoyeb · · Score: 5, Interesting

      Its illogical. How can you produce a product that attacks things attempting to exploit your holes when you have the ability to patch the holes?

      If they sold it, it would be a conflict of interest.

    2. Re:re Hard to decide ... by mazarin5 · · Score: 4, Insightful

      It would be a very difficult stretch for MS to sell an anti-virus program for Windows. That would be like selling defective car tires, and then charging extra for the patches.

      I don't think that most AV vendors have to worry though; Microsoft's AV division is likely to be as good at plugging security holes and patching exploitable bugs as the rest of the company.

      --
      Fnord.
    3. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      it will drive away competitors because Joe-sixpack is
      not going to spend any money to replace something he got for free

      Hell, most non-techinical Windows users I come across think they're still protected by their long-expired trial copy of Norton or Symantec. This can only be a good thing for them, and the rest of us can continue to use nod32/avg/whatever.

    4. Re:re Hard to decide ... by 99BottlesOfBeerInMyF · · Score: 4, Insightful

      If it comes free with the OS it will drive away competitors because Joe-sixpack is not going to spend any money to replace something he got for free, even if it sucks.

      Agreed. If there were to be real competition for OS's then consumers could choose the OS with the best anti-virus and we'd still have competition. Right now, that is not the case though.

      On the other hand, if any feature needs to be part of the OS is precisely a form of protection against malware.

      Again, I agree that the technology needs to be there, but not necessarily the data. If the DOJ had a clue they'd see this as an antitrust issue and order Microsoft to implement the technology, but open up the whitelist, blacklist, and detection heuristics as an open spec and then require MS sell their service separate from the OS and on even ground with any other company that wanted to compete. Hell, require the data feed to be an open standard so Macs and Linux could implement it and plug in to the same anti-virus blacklist feeds and we'd have some real progress in the industry, for a change.

    5. Re:re Hard to decide ... by Sancho · · Score: 4, Insightful

      Antivirus guards against trojans, too. Not much Microsoft can do to patch if the user is insistent upon running that program (i.e. the security hole is in the meat), but a whole lot of them will sit up and take notice if their antivirus pops up and warns them away.

    6. Re:re Hard to decide ... by ozphx · · Score: 3, Insightful

      Yeah it would be like selling a car and including a jack and wheelbrace. Or providing a repair service for your phone in case you drop it.

      Or wait... I know... Microsoft could just plug this hole by preventing users from getting admin privileges at all! Also from now on, all data should carry the NOEX bit - wherever it exists - which would be a trivial modification to IP/HDDs/etc. Sucks for anyone that wants to use a compiler - but you just can't be too safe.

      --
      3laws: No freebies, no backsies, GTFO.
    7. Re:re Hard to decide ... by dhavleak · · Score: 1, Interesting

      This is definitely a good thing for consumers.

      If there's any antitrust directives that come out of this, it's that at some later point in the future (if/when the big competitors have disappeared) MS will not be allowed to start charging money for the suite -- it has to remain free.

      About the move itself: it gives less people a reason to be running without antivirus sw., it enables more OEMs to sell PCs with AV pre-installed (which will not nag users in 1 month/3 months/1 year/whatever), and OneCare is less likely to use rootkit techniques etc. that symantec and others have used in the past.

    8. Re:re Hard to decide ... by techno-vampire · · Score: 1

      One thing you have to take into consideration is that most people don't understand that Windows is insecure by design. They don't know that until recently security was not something Microsoft gave any consideration to, or that when they did, it was mostly tacked on as an afterthought. All they know is that their computers keep getting slower and slower and eventually they decide to throw it away, buy a newer, faster one and start the cycle over. About all this will mean to them is that their newest computer will come with AV, instead of their having to download and install it. (All too many, of course, don't bother, which is part of the problem.) Assuming that they allow it to update itself, and that it's not simply security theater (Cancel or Allow, anybody?) it might even make their computers last a little longer before they get discarded simply because they need a tune-up.

      --
      Good, inexpensive web hosting
    9. Re:re Hard to decide ... by quanticle · · Score: 4, Interesting

      but a whole lot of them will sit up and take notice if their antivirus pops up and warns them away.

      You'd think so, but that's simply not the case. In my time as a PC tech. I saw all too many PCs where the user had clicked on something, seen repeated antivirus/anti-spyware warnings and still continued with the installation. Basically, it comes down to an issue of trust. People distrust their antivirus as much as they distrust the random crapware they download from the Internet. So, when the antivirus pops up and tells them, "Hey, this software is going to bring along a virus," they feel safe in ignoring it, since they've seen all too many false alarms for other things (like tracking cookies).

      --
      We all know what to do, but we don't know how to get re-elected once we have done it
    10. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      I've been saying for years the same thing, every desktop OS should have av and anti-spyware protection built in.

      I also have no problem with web browser bundling. I just think that for both (av and web browsers) though a vendor can bundle, they should be easy to replace with 3rd party alternatives if the user so wishes.

    11. Re:re Hard to decide ... by Sancho · · Score: 4, Insightful

      Well, I said a lot, not all. Remember, as a PC tech, you've got a locality bias. You're seeing a lot of people whose PCs were infected. The ones who practice safe computing probably don't come in as much.

    12. Re:re Hard to decide ... by quanticle · · Score: 1

      Fair point. I do know of a lot of people who haven't bothered running anti-virus in years, and have never been infected because they simply use safe computing practices (like staying diligent with patches, avoiding warez and other suspicious executables, etc.). However, I somehow doubt that this 'Morro' will be targeted towards that demographic.

      --
      We all know what to do, but we don't know how to get re-elected once we have done it
    13. Re:re Hard to decide ... by Dan93 · · Score: 3, Informative

      They already DO sell antivirus software. Windows Live OneCare.

    14. Re:re Hard to decide ... by cheater512 · · Score: 1

      Your assuming that Microsoft is competent and this new software actually does a effective job and continues to do so in the future.

    15. Re:re Hard to decide ... by Darkness404 · · Score: 5, Insightful

      In the pre-Vista age perhaps, but with UAC and the paranoid level of dialogues in browsers needed to get anything done, Joe Sixpack is going to just click allow, even if that means he has to pay $300 to get his box repaired by the Geek Squad. The problem is, by increasing the amount of warnings, the less likely anyone is going to care about them.

      --
      Taxation is legalized theft, no more, no less.
    16. Re:re Hard to decide ... by Darkness404 · · Score: 2, Interesting

      I've been saying for years the same thing, every desktop OS should have av and anti-spyware protection built in.

      No. I totally disagree. The OS should be out of the way and not mess with anything. The OS should be patched to a reasonable degree of security and be configured with permissions, limited user accounts and limited applications. Perhaps if this was some F/OSS project it might be ok to build into the OS with, but as MS has shown, they can't do security. They either overload the user with annoying messages at the slightest change (UAC) or totally ignore security (like pre-SP2 XP installs)

      --
      Taxation is legalized theft, no more, no less.
    17. Re:re Hard to decide ... by tuxgeek · · Score: 1, Flamebait

      You over looked one fact
      Joe-sixpack doesn't use a computer. He is too busy drinking beer and scratching his sack.

      --
      "Suppose you were an idiot...and suppose you were a member of Congress...but I repeat myself." Mark Twain
    18. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      At least I am pretty sure the likelyhood of flaggin explorer.exe as virus is much lower

    19. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      Don't forget about what happened in Europe a few years ago with Media Player. Too lazy to log in, or find articles, but IIRC, it had something to do with their laws against anti-competitive practices, and the fact that Media Player HAD to install on every instance of Windows.

    20. Re:re Hard to decide ... by duckInferno · · Score: 1, Interesting

      Flawed analogy. It's like selling car tires, then charging extra for a nail-proof coating.

      Microsoft may not have the best OS out there, but it suffers from the same design linux does: it has to be able to run third party applications, including the shoddy exploit-inducing ones.

      --
      Fool me once, shame on you. Fool me twice, watch it -- I'm huge!
    21. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      Microsoft blog said it will be a free download. Not shipped with OS

    22. Re:re Hard to decide ... by BrokenHalo · · Score: 1

      It would be a very difficult stretch for MS to sell an anti-virus program for Windows. That would be like selling defective car tires, and then charging extra for the patches.

      According to the submission, the software is supposed to be free.

      That said, Microsoft would have to pay me to suffer the frustration of running their operating system...

    23. Re:re Hard to decide ... by andy_t_roo · · Score: 1

      While the question may appear to come down to "do you trust microsoft to make a secure piece of software", this isn't quite what is happening
      I believe the question is more like "do you want microsoft to automagically detect and stop specific other software, which is known to cause harm, from running, even if the user has clicked "yes i do want to install usefullInternetThingy+Trogen #37b".

      People are quite happy to click "yes, allow this random program to run and install, as i just asked it to do", but I don't think that "This program is contains Trojen #37b and has been blocked" is as likely to be ignored.

    24. Re:re Hard to decide ... by MSTCrow5429 · · Score: 1
      From press release:

      "Morro" will be available as a stand-alone download and offer malware protection for the Windows XP, Windows Vista and Windows 7 operating systems. (italics added)

      --
      Slashdot: Playing Favorites Since 1997
    25. Re:re Hard to decide ... by Mr.+Jerry · · Score: 0

      , maybe the company will finally implode and let other OSes get a greater market-share.

      newsflash, other OS's are already gaining market share.... http://marketshare.hitslink.com/report.aspx?qprid=9

    26. Re:re Hard to decide ... by BrokenHalo · · Score: 1

      Hell, most non-techinical Windows users I come across think they're still protected by their long-expired trial copy of Norton or Symantec.

      I suspect that's because the psychological impression of the permanence and durability of the physical CDROM or DVD imparts a sort of reassurance with no experience to back it up.

      I've often wondered whether banning sales of these CDROMS might help get people to download and run up-to-date versions. Of course, better yet, they could just run OSs that don't need anti-virus programs...

    27. Re:re Hard to decide ... by shird · · Score: 3, Insightful

      Why does everyone seem to think Windows somehow allows malware due to 'holes' in the OS? Malware isn't any different to normal software from the OS' perspective. If you can write legitimate software than can send an email, or download an image and display it to the user, then you can write 'malware' that can send spam or display advertisements. Idiot.

      --
      I.O.U One Sig.
    28. Re:re Hard to decide ... by cheater512 · · Score: 1

      The parent was saying that it was good for consumers because it would drive out all the competition and then Microsoft would not be allowed to charge for it due to anti-trust.

      Thats where the competency of Microsoft comes in to question.

    29. Re:re Hard to decide ... by ben2umbc · · Score: 1

      Pretty much all cars come with a radio/cd/mp3 player. It is probably alright, but it doesn't get the HD channels, or allow sound presets. Some people still upgrade for better options.

      But if the MS software stops people from getting those dumb viruses that encourage people to buy the "only software that can remove it" and pay for bad antivirus software - then it can't be all bad.

    30. Re:re Hard to decide ... by slashdawg · · Score: 1

      They already sell an antivirus package..ONE CARE

    31. Re:re Hard to decide ... by martin-boundary · · Score: 4, Funny

      The ones who practice safe computing probably don't come in as much.

      Yeah, they probably even use Linux. Savages.

    32. Re:re Hard to decide ... by T-Ranger · · Score: 1

      I'll disagree on this point. Windows - the NT Kernel, at least - is very "secure", by design. Excluding things like Multics, or SELinux with MAC, NT has about the most comprehensive security model available.

      Its insecure in its implementation.

      - The security resolution process didn't agree with the very limited early documentation; developers gave up and told everyone to "run as administrator".
      - Even for something simple, given the poor early documentation, developers gave up and told everyone to "run as administrator".
      - Lots (most?) NT and/or XP developers came from a DOS/9x background where security <em>was</em> non-existent, so they gave up, and developers gave up and told everyone to "run as administrator"
      - These things are also true of many internal MS products, encouraging a community of developers who give up and tell everyone to "run as administrator"
      - Users were similarly trained with DOS, 9x that security doesn't matter, and thus even with the option of doing the right thing, they gave up and run everything as administrator (and/or click "OK" to everything).

      So. The Windows security implementation is shitty. And the windows security culture is shitty. But the windows security design is pretty good,

    33. Re:re Hard to decide ... by Atlantis-Rising · · Score: 2, Insightful

      That's not the problem at all.

      Most people don't understand security, period. The variants of Windows that most people use these days (XP and Vista) are just as secure as NT or 2000 was at the time... but running a securely locked down operating system requires a knowledgeable and motivated administrator.

      There is nothing that is inherently insecure about Windows. UAC, for all that people criticize it, is a genuine security advantage... if you bother to use it, which few people do.

      People don't wonder why their car stops working if they continuously drive it into walls- the answer is obvious. Stop driving your car into walls, numbnuts.

      Just because the internals of a computer are more obscure does not excuse the user's stupidity, which is the primary cause of usability slowdowns and security exploits.

      --
      "It is possible to commit no errors and still lose. That is not a weakness. That is life." -Peak Performance
    34. Re:re Hard to decide ... by 99BottlesOfBeerInMyF · · Score: 4, Insightful

      Why does everyone seem to think Windows somehow allows malware due to 'holes' in the OS?

      Because, statistically speaking, malware running is the result of holes in the OS and most infections are worms that run with no user interaction at all. The malware you describe is called a trojan and, while a serious problem, is still not the most common type of malware infection (note there are more trojans than worms, but each trojan hits a much smaller number of systems).

    35. Re:re Hard to decide ... by Anonymous Coward · · Score: 5, Insightful

      > Why does everyone seem to think Windows somehow allows malware due to 'holes' in the OS? Malware isn't any different to normal software from the OS' perspective. If you can write legitimate software than can send an email, or download an image and display it to the user, then you can write 'malware' that can send spam or display advertisements.

      Windows think. Installing software can indeed be made totally different to normal software from the OS perspective.

      Windows will just blindly and happily execute anything it thinks it has been requested to execute.

      On Linux or BSD, files aren't executable by default. The OS just won't run them. Any attempt to make a file executable requires a local user to manually enter a password. Hence, if a user is asked for a password ... especially the administrator password ... they are immediately alerted ... "hang on a minute, I wasn't trying to install anything just then, or make a change to the system". Having to enter a password is like waving a great big red warning flag. "Whoop, whoop, install happening!! Attention, attention ... did you mean this?"

      Amongst Windows users (being used to the complete lack of concepts such as these), Windows' complete lack of adequate security is often confused for security being impossible to achieve.

      Windows think. Its everywhere.

    36. Re:re Hard to decide ... by 99BottlesOfBeerInMyF · · Score: 1, Insightful

      Yeah it would be like selling a car and including a jack and wheelbrace. Or providing a repair service for your phone in case you drop it.

      The problem with MS antitrust analogies, is people never use a monopoly in those analogies. So it would be like selling a car and a jack together, when you're the only company that sells cars and your tires are known to have huge defects and explode all the time to the point that an entire market has grown up allowing car buyers to work around your defective design and drive normally.

      A more understandable analogy yet would be if the power company started shipping emergency generators to all their power customers and started ignoring customer complaints about frequent power outages and bribed the government to stop enforcing regulations about power reliability and raised their rates to all customers to cover the cost of the generators they shipped out. At this point all the current manufacturers of generators would go out of business regardless of how good their generators were, because everyone would already have one supplied by the monopolist power distributor. The power company would also have no real motivation to make their generators well, or improve them, or lower the cost of making them, because they don't have to compete... sort of like the way crappy rotary phones that were rented for tens of thousands of dollars over a person's lifetime dominated the entire time AT&T had a monopoly and then suddenly improved right afterwards.

      It gives you a much better idea of what to expect as far as quality and innovation and cost you can expect to bear if MS is allowed by regulators to blithely undermine the free market and ignore antitrust law. Let's all hope Obama appoints some less bribable people and stands up for the people over big business.

    37. Re:re Hard to decide ... by blueZ3 · · Score: 5, Insightful

      On many fronts, the malware situation on Windows is the OS's fault.

      First, OS files should not be writable by random executables on the system. Period. The idea that bobs_your_uncle_32.exe, installed on a user account, runs as a superuser and can modify important system files is completely idiotic. The inability of Microsoft to implement a basic separation between privilege levels is the root of the problem (pun intended)--and they don't get to weasel out of it by saying "you COULD run/install software as a local user" because their FUBAR'd implementation meant that wasn't a realistic option.

      Secondly, a lot of malware installation has historically been the result of stupid things that Microsoft did to be "helpful"--like automatically executing scripts in Outlook's preview pane. Or the idea that installation of software should be "silent"--where a program can be downloaded and installed without any user interaction. Brilliant.

      Microsoft has made (some small) improvements in these areas. But they're not off the hook by any means.

      --
      Interested in a Flash-based MAME front end? Visit mame.danzbb.com
    38. Re:re Hard to decide ... by DiegoBravo · · Score: 1

      Users are more willing to upgrade the antivirus than patching (and possibly f*king the OS), cause most have been bited by malware -attributed to the lack of AV. In most ways, patching the OS should make the AV unnecessary. Assuming this, all M$ is doing is a marketing change in the mindset of the users: instead of encouraging to patch (which most users don't do), they now encourage to "upgrade the AV" (that scares most users.)

      This way they really do not do anything new, besides some silly reporting screens and possible better patches, and most important, promote a change in the current believe that Windows is stupidly insecure by its own, contrasting Linux/OSX/whatever.

    39. Re:re Hard to decide ... by v1 · · Score: 1

      Antitrust regulators in the U.S. have tended to focus on harm to consumers as opposed to competitors.

      he said that like there's something wrong with that.

      The government protecting the people instead of the businesses. Imagine that!

      Idiot. This is one of the major reasons why this country has gotten so screwed up.

      --
      I work for the Department of Redundancy Department.
    40. Re:re Hard to decide ... by msuarezalvarez · · Score: 1

      On Linux or BSD, files aren't executable by default. The OS just won't run them. Any attempt to make a file executable requires a local user to manually enter a password.

      You should really try that...

    41. Re:re Hard to decide ... by HeronBlademaster · · Score: 1

      Of course, better yet, they could just run OSs that don't need anti-virus programs...

      If everyone switches to OS X (for example), it won't be too long before we see just as many viruses for OS X as we see for Windows. If you believe otherwise, you don't understand why there are so many viruses for Windows - it's not because Windows is more insecure, it's because Windows is on a great majority of end-user computers.

      There are already antivirus programs available for both Linux and OS X; just because they're not necessary right now doesn't mean they won't be necessary in five or ten years.

      I, for one, am happy to let Windows stay on top, just so malware authors don't bother to target Linux and OS X machines.

    42. Re:re Hard to decide ... by msuarezalvarez · · Score: 2, Informative

      In the name of $SOMETHING, what possible good is a pretty good design wrapped up in a bad implementation? Your apology is probably the worst apology EVER!

    43. Re:re Hard to decide ... by Jarjarthejedi · · Score: 2, Insightful

      "The idea that bobs_your_uncle_32.exe, installed on a user account, runs as a superuser and can modify important system files is completely idiotic."

      It would be, if that was even close to how it worked. Instead the problem is that bobs_your_uncle_32.exe is installed and run by an administrator, and if you ban admin from modifying important system files you run into a host of other issues.

      MS needs to start pushing (as in, default case) low privileges for default accounts and the ability to sudo an app up to administrator level. Don't blame them for your software (which you run as admin) running as administrator, blame them for making administrator default rather than rare.

      --
      There are two kinds of fool One says 'This is old therefore good' Another says 'This is new therefore better'- Dean Ing
    44. Re:re Hard to decide ... by Jarjarthejedi · · Score: 1, Troll

      What monopoly? Last time I checked Mac and Linux existed. MS has a virtual monopoly by merit of being the most used but that's not the same as an actual monopoly. As long as other choices exist any monopoly argument falls apart. More akin to there being 3 power companies and one following the practices you describe while the others don't, and people just being too lazy, stupid, or in the dark to switch to another company.

      --
      There are two kinds of fool One says 'This is old therefore good' Another says 'This is new therefore better'- Dean Ing
    45. Re:re Hard to decide ... by compro01 · · Score: 1

      It throws a sudo (whatever GUI frontend it uses, I forget) password prompt in Ubuntu.

      Xubuntu 7.04. It's my aunt's machine pretty much used only for mahjong and other simple games, has no internet connection whatsoever, and it works fine with no issues, so I haven't bothered updating it.

      --
      upon the advice of my lawyer, i have no sig at this time
    46. Re:re Hard to decide ... by 99BottlesOfBeerInMyF · · Score: 5, Insightful

      What monopoly? Last time I checked Mac and Linux existed.

      You obviously don't understand what MS's market for desktop OS's is. They sell very few of them as boxed copies to individuals. They have a small market selling site licenses to corporations, but by far their largest market is computer OEMs like Dell. So if you were running Dell, would you license OS X to run on the computers you sell? Nope, because Apple isn't selling them. Hence, OS X and Macs are not a valid competitor. Would you pre-install Linux? Well maybe, but it is not a valid competitor in most cases because of software lock-ins. It has basically no market share and certainly not enough to affect whether or not MS has enough market share to unduly influence other markets (70% is the amount regulators start looking hard at). Generally, if the closest thing you can find to a competitor is a product developed by hobbyists disgusted with having no choices and given away for free... well that's a bloody good sign there is a monopoly at work.

      MS has a virtual monopoly by merit of being the most used but that's not the same as an actual monopoly. As long as other choices exist any monopoly argument falls apart.

      Legally and economically, you don't have to be the only option to wield undue influence in markets and undermine the benefits of capitalism. You're not going to find any reputable economists not being paid by MS who claim MS does not wield monopoly influence in the desktop OS market and MS has, in fact, been found to have such influence by the US courts, the EU courts, and several other nations. Sorry, but at this point the argument that MS doesn't have a monopoly can only be the result of burying your head in the sand. What, do you think it's all some sort of global conspiracy of lawyers, judges, and economists?

      More akin to there being 3 power companies and one following the practices you describe while the others don't, and people just being too lazy, stupid, or in the dark to switch to another company.

      Not at all. The analogy holds up very well. MS is the power distribution monopoly in your geographic location. Apple is the guy who sells solar cells and windmills and fuel cell generators which cost a bundle but are economic for some uses in some locations over the very long term and prevent you from having to deal with the power distribution company (but do not distribute power themselves). Linux is the guy who drives a big truck full of car batteries to the nearest power plant, pays to charge them all up, then drives back home and hooks them up to run his house for another couple of days. They are alternatives that allow one to avoid MS, but not much in the way of actual competitors in the same market.

    47. Re:re Hard to decide ... by msuarezalvarez · · Score: 1

      Saying:

      touch empty-file chmod +x empty-file

      asks for a password?!

    48. Re:re Hard to decide ... by ddelella · · Score: 1

      No where in the article does it say that Microsoft is bundling the software with its new OS. It will be just like Live OneCare is now except free. One of the best anti-virus programs (according to pc world) is free (Avast Home Edition). I still don't see that affecting Norton or McAfee. I mean Norton is still bundled with a lot of pc when you buy them. Judging by pre-beta comments from Windows 7 they have stipped all the arguable applications from windows and made them al-a-carte which is nice. I just don't understand why no one sues Apple. They bundle tons of software in their OS so why can't Microsoft do the same.

    49. Re:re Hard to decide ... by Lucky75 · · Score: 1

      Of course, they may only believe that they are safe because they don't have an antivirus popping up to warn them that they have a virus. Good viruses do not make themselves known in ways that script kiddie viruses do.

      --
      DNA -- National Dyslexic Association
    50. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      launching a trojan as a user should not allow it to execute code and make changes that you should have administrator privileges to run. a choice between "cancel or allow" is not enough.

      on this linux box i am somewhat safer than i would be with a windows box because i know if i execute some random file as a user and it promts for the root password that it's something bad and i don't want to do it. you don't get that sort of insight when the OS asks "sure you wanna do this bubba?" for every damn executable you run.

      so yes, there is something microsoft can do to at least keep trojans out of the heart of the OS, and the proper regimen of patching will help prevent that trojan from escalating it's own privileges.

      imagine how much nicer windows would be if most infections could be cured by backing up your personal data, nuking the hell out of your 'home' directory or partition, and scanning your backup and tossing anything with an infection while keeping it in a position where it can't evade or fight back.

    51. Re:re Hard to decide ... by rrohbeck · · Score: 4, Insightful

      That would mean that all legacy SW, including MS's own, would stop working. They all rely on being able to write all over the system. And without backwards compatibility, what's the impetus to stay with Windows?
      Backwards compatibility is why they needed something as screwy as UAC.

    52. Re:re Hard to decide ... by Anonymous Coward · · Score: 1, Insightful

      Joe Sixpack DOES NOT pay for this anyway...AV software, malware scanners are all available free of charge anyway.

      Even though MS provides free firewall software, many users still choose to use other (equally free) offerings. I think that the same will apply to AV products.

      What will affect AV vendors is corporate acceptance of MS products...

    53. Re:re Hard to decide ... by Anonymous Coward · · Score: 4, Insightful

      Don't forget the ones who click on misleading popups that say "You may have a virus", thereby installing malware.

    54. Re:re Hard to decide ... by Anpheus · · Score: 3, Informative

      Microsoft very heavily considered making Vista have a user-level account that required UAC to prompt for an admin account and password. Of course, you can set up your computer like that, but picking good defaults is something every programmer is aware of.

      Unfortunately, Microsoft is all too well aware that picking the low-level user default means a lot more people would complain about their computers being 'broken,' because of the following reasons:
      1) Microsoft had not fully transitioned its own services and utilities to use UAC tokens well, which results in multiple dialogs when trying to perform a single action on a protected file in a protected folder. Technically it's multiple actions, but they didn't make any way for a UAC token to apply to multiple events like that. (I leave the reasoning behind that to the reader.)
      2) ISVs had not, until this point, had to deal with any more than an insignificant fraction of the users running without admin access. Even in internet cafes, the default user is typically an administrator that has had certain privileges removed, because it's easier to start from admin and start taking things away than it is to start from a low level account and add all the myriad, complex ACLs that you need to make 99% of programs work flawlessly.
      3) ...
      4) Profit: by making Vista annoy users and developers sufficiently that fewer applications will need administrator to run. According to Microsoft's data from opt-in user information, there has been a marked drop in applications that request administrator rights, about 50%. That's -tremendous- news, and there is still a downward trend. Fixing the Microsoft default security settings over a series of OS releases makes the entire thing less expensive, and with all the flak Vista got, their decision to not add one more thing to the pile of bad things Vista does by default is the only sensible one.

      Windows 7 fixes many unnecessary UAC prompts and allows you to set users to have different levels of prompting, and I would put money on Windows 8 using a default low rights user as the final step in the transition. Reply here if you want to set it up :)

    55. Re:re Hard to decide ... by Hal_Porter · · Score: 1

      That's just not true. UAC pops up warnings on my machine at home when I install stuff or change the date and time. All those things are rare though, most of the time I never see a UAC pop up. If I did I'd start hunting for malware.

      Of course the big win of Vista over XP is that most processes are no longer running with admin privileges, and that means they have no access to the sensitive parts of the registry or filesystem. Actually I remember back in the XP days one of the complaints about Windows was that unlike Linux or MacOS everyone run as admin all the time.

      --
      echo -e 'global _start\n _start:\n mov eax, 2\n int 80h\n jmp _start' > a.asm; nasm a.asm -f elf; ld a.o -o a;
    56. Re:re Hard to decide ... by cerberusss · · Score: 2, Interesting

      In the pre-Vista age perhaps, but with UAC [...] Joe Sixpack is going to just click allow

      I wish this myth would die. UAC fires off a dialogue in the following instances:

      - Changes to system-wide settings or to files in %SystemRoot% or %ProgramFiles%
      - Installing and uninstalling applications
      - Installing device drivers
      - Installing ActiveX controls
      - Changing settings for Windows Firewall
      - Changing UAC settings
      - Configuring Windows Update
      - Adding or removing user accounts
      - Changing a user's account type
      - Configuring Parental Controls
      - Running Task Scheduler
      - Restoring backed-up system files
      - Viewing or changing another user's folders and files

      Now I ask you, is any of the above something a normal user (without administrative rights) should be able to do?

      --
      8 of 13 people found this answer helpful. Did you?
    57. Re:re Hard to decide ... by jopsen · · Score: 1

      How can you produce a product that attacks things attempting to exploit your holes when you have the ability to patch the holes?

      I agree, however, holes in non-microsoft applications and plugins such as Adobe Acrobat or Adobe Flash is probably just as big an issue... As the holes in MS windows. (thought those problems could as many suggest be fixed by proper execution level separation).

      Generally, I view antivirus as quick, dirty and cheap patch to a fundamental flaw in the proprietary software ecosystem.

    58. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      On Vista, accounts are restricted by default and it even has a sudo tool.

      Spoiler: It's called UAC.

    59. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      Sure it does.

      You needed to supply a password when you logged on, in order to get the console into which you typed your commands. The password needed to be manually supplied at logon. Knowing the password for that account allows you to set execute permission up to the privilege level of that account, and no higher.

      Congratulations.

      Because you were able to logon by manually supplying a password to a user account, you can now execute empty-file within that account's scope, with that accounts privilege level.

      If you wanted to execute empty-file with root privilege, you will need to logon (or change user to) root, manually supply the root password, and then re-issue the chmod command.

      These latter steps would be required in order for the execution of empty-file to be able to change any system settings or programs.

    60. Re:re Hard to decide ... by BrittanyGites · · Score: 1

      Users are more willing to upgrade the antivirus than patching (and possibly f*king the OS), cause most have been bited by malware -attributed to the lack of AV.

      I think they are less willing now after millions of users got bitten by the last AVG debacle which trashed the OS.

      --
      Ian
    61. Re:re Hard to decide ... by JasterBobaMereel · · Score: 1

      Microsoft did sell an anti-virus product at one time, it was universally hated and all the testers panned it as worse than useless .... why exactly would anyone want it ...?

      --
      Puteulanus fenestra mortis
    62. Re:re Hard to decide ... by rts008 · · Score: 4, Insightful

      "Now I ask you, is any of the above something a normal user (without administrative rights) should be able to do?"

      Emphatic NO!

      I do not know anything about Vista first-hand. I have info from my co-worker(he said that it is 'different' from XP,sort of, but overall not bad-seems to like it a little better than XP, but dislikes some changes. I had previously set him up with Kubuntu 8.04, and he has become partial to that over Xp or Vista, but still dual boots with more time spent in Kubuntu than Vista.), and what I 'hear' here and elsewhere on the internet.

      I understand(from above info) that Vista is a positive step forward for MS on the security front, and can only applaud that-diminishing malware is a GOOD thing no matter which OS someone is using.

      Having said that, I do have to admit(from personal experience as a PC tech, and as a self-employed in spare time 'Window' cleaner and tuner-upper, that MS has inadvertently 'trained' users to click on the 'allow' button on pop-ups during upgrafes/installs/changes since at least the Win95 days to 'just get stuff done'.

      "I wish this myth would die."

      Good luck with that.
      I have been wishing the same for the '*nix is too hard to learn for a n00b'* meme that even pops up here on /., but I don't hold my breath. I suggest you don't either.

      Your list seems accurate to me, and I have to agree with you.
      We should be more objective here, but it seems that religion/politics/OS discussions seem to bring out the trolls and flamers.
      Loyalty for what you believe in(human nature-at the risk of an off-topic thread/flamefest) is deeply embedded here.

      *disclaimer: I have been 'anti-MS since the whole WGA implementation' days when I switched to *nix, but I agree with everything you said.

      --
      Down With Slashdot BETA!!! I've been around the corner and seen the oliphant; you can only abuse me from your perspecti
    63. Re:re Hard to decide ... by ergean · · Score: 2, Interesting

      Oh yes. And it gets annoying as hell when you need thing done in a hurry and plug your flash drive or something else in your PC and you are working writing something in word. All of a sudden you have to halt everything just to say allow to something else, that could just go in background and not put everything in background.

      Don't fucking ask me if I want to install something if I have the stupid autorun removed, just ask me when I want to access the device.

      There are the little things in Vista that makes it so ugly. Like trying to change the screen resolution, why the fuck do I have to open 3 windows just for that and close them one by one? What was wrong with 2000/XP way of doing it?
      Why on earth would I want 6 ways to get to the same option opening as many windows?

      Or why not just give me a command line to get where I want. I can type faster then mouse navigating to what I want.

      I know I'm not your average PC user, I'm a PC tech. But if you are making my job harder I'll go my way around to swing my customers away from it, not that I need to do that anymore.

    64. Re:re Hard to decide ... by jvervloet · · Score: 2, Informative

      "The idea that bobs_your_uncle_32.exe, installed on a user account, runs as a superuser and can modify important system files is completely idiotic."

      This isn't a Windows-only problem any more.

      I bought myself a Linux powered Acer Aspire One, which has Linpus installed by default. The default user can sudo anything without having to enter a password, which I think is a serious security risk.

    65. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      - Running the program you just installed.
      - For the third time, even though you clicked allow the first two times.
      - Opening just about anything under control panel or administrative tools.

      Second, I don't see your point about users without administrative rights. Users without administrative rights should not be allowed to do this in the first place, so asking them would be pointless. However, people also have PCs at home, where they need to be able to do this. Otherwise they'd be calling me all the time.

      Now, once they've been trained - at home - to click "allow" on every dialog box they see, do you think they are going to act differently at work, where the dialog box may not be from the UAC, but from the antivirus program?

    66. Re:re Hard to decide ... by drx · · Score: 0, Troll

      I wonder why this idea that a division between "Administrator" and "User" would help anybody.

      As a user i need so send email and modify files etc. If this is not possible anymore, i also cannot run "malware". From the perspective of the OS, malware is doing the same things that a user does.

      So why should a "user" be forbidden to open ports, run scripts and all the things that are done to work and play with a computer?

      The division between "Admin" and "User" comes from multi user systems, where someone was in charge of keeping everything running and preventing one person from destroying the utility for everybody. But it doesn't help with home-owned desktops that have only one user.

      I wish i had an administrator that would take care of everything, but too bad i don't!

      And the system that single users are going to break when they fuck up their machine is the whole internet, and there is no administrator for the internet. (And i hope there never will be one.)

    67. Re:re Hard to decide ... by rts008 · · Score: 1

      Good refute.
      *dislaimer-I have become a '*nix fanboy* back when MS insisted on WGA, after the 3rd time I had to re-install my RETAIL disc of XP sp2, and according to MS, my retail copy was 'pirated' and demanded me to buy a new license for $120.00 USD*

      Facts and objective reasoning should prevail here....but alas, we are human, and subject to vitriol and prejudice.

      Besides, what can you expect?, This is /.! :-)

      *curses /. filters!*

      --
      Down With Slashdot BETA!!! I've been around the corner and seen the oliphant; you can only abuse me from your perspecti
    68. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      Actually, if you check various antivirus comparative sites, you'll find that Microsoft's antivirus software doesn't rank low at all. Its in the top 5, IIRC.

    69. Re:re Hard to decide ... by Anonymous Coward · · Score: 5, Interesting

      It is much worse... I got a trojan on my system, a Net Devil, roll-your-own type. Before I went to uninstall it, I debugged it and got the ICQ account details. I used the credentials to log into the account and changed the password. I watched as the victim IP addresses poured in! To investigate, I downloaded the client half of Net Devil and connected to a few victims. Total access!

      Screen capture, key logger, executable, download, upload, you name it! It had a feature to send popup messages that I used to tell the victim they had a virus and they should take steps immediately to remove it. Some would unplug their computers immediately, while others would just click OK and keep going. I would send another message like "No really! You have a virus!" and they still just pressed OK and just kept typing their IM. Of course, it usually got their attention when I opened 30 message dialogs in a row. The most effective way I got their attention was to turn their graphics upside-down and open their CD/DVD tray :) Nothing like a ghost in the machine to wake them up.

      • Other variations:
      • launch winamp and crank up the volume
      • same, but use a pr0n clip from their stash
      • (most sinister) activating their webcam
      • (silent, yet dreadful) the keylogger

      It had an option to remove the trojan from the host, so I cleaned up a few, but the IP addresses kept flowing in worldwide (esp. France?) and it was rather depressing trying to help users that pretty much ignored anything but the blatant scare tactics.

    70. Re:re Hard to decide ... by dhavleak · · Score: 1

      Your assuming that Microsoft is competent and this new software actually does a effective job and continues to do so in the future.

      True. I guess there are a couple of corollaries to that:
      - If MS doesn't provide good antivirus, users (or at least corporations) will stick with other vendors, so the competitors might never go away
      - If the competitors do go away (say because MS was doing a good job), and then MS relaxes on the AV front, their platform starts getting pwned by viruses again, resulting in inroads into their OS share (say by OS-X and Linux) coupled with a resurgence of the AV market.

      There's also a third scenario where MS might do a good job, and just continue to do a good job, in which case consumers win.

      Ultimately I don't think any of these scenarios is a bad thing -- it's just a company that needs to make a certain move to improve the customer experience on their platform. If they execute well, customers win and so does MS -- and if not, customers will eventually get frustrated and go to some other platform. No need for antitrust lawyers to get involved except for the scenario I had called out earlier -- where MS offers the AV downloads for free, does a good job, eradicates competition, and then starts charging -- in that case the free giveaway was done solely to kill competition -- and that's the only scenario that antitrust law needs to concern itself with. Further, since customers will have to explicitly download the product (as opposed to having it bundled into the platform as was the case with IE4) there's even less need for antitrust regulators to get involved.

    71. Re:re Hard to decide ... by online-shopper · · Score: 1

      on most systems it won't ask for a password, however that command won't make anything executable*. There is something to be said for making chmod ask for a password first though.

      * You meant touch empty-file && chmod +x empty-file

    72. Re:re Hard to decide ... by Vaeil · · Score: 1

      That's not the devision of Admin/user intended. A user has the full rights to modify files, run scripts, send email and everything, but he can only do so in his own domain. The only thing the user can't do is modify stuff that's owned by other users, or modify the system itself. What this means is that by default: Nothing you do as a user can hurt the computer that much. Sure, you can get a virus if you try, but that virus will only be able to affect your own files, the computer itself will remain running. and other users won't be affected. This system does work for home systems with only one user. YOu can simply use the computer without fear of breaking anything, and when you want to modify the system (change system files), you just need to put in a password. Sadly, Windows will never function like this. As said before, backwards compatibility is too big a price to offer, and too many software depends on being able to play with the system in any way it pleases.

    73. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      I just don't understand why no one sues Apple. They bundle tons of software in their OS so why can't Microsoft do the same.

      Sigh.
      As has been pointed out many, many times: Microsoft is a convicted monopolist and has repeatedly illegally used that monopoly to put competitors out of business. As a result it has constraints on it that do not apply to Apple.

      Also, pre-empting any quibling about MS not being a monopolist because they don't have 100% of the market: that is not how monopolies are defined in competition law, and a company can be legally regarded as a monopoly with considerably less than 100%.

    74. Re:re Hard to decide ... by DrSkwid · · Score: 1

      how did touch get run ?

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    75. Re:re Hard to decide ... by Bert64 · · Score: 1

      No, and Linux/OSX would behave in a similar way, ie asking for your password when trying to do such tasks...

      On the other hand, many windows apps do try to do such things, because that is the way previous versions were designed. And the issue is that OSX and Linux did not suffer such poor design decisions in the first place.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    76. Re:re Hard to decide ... by cbhacking · · Score: 0, Troll

      So many things wrong here...

      Stuff that is run by a user (i.e. non-Administrator) CANNOT modify system files, unless those files' permissions were previously edited by an admin. You seem to be confusing the idiocy of people logging in with Admin accounts for everyday work for some kind of hole in the OS (although admittedly MS screwed up when they made the default accounts members of Administrators)

      Modification of system files that results in failing the cryptographic signature check (i.e. any change at all that doesn't come from MS) also causes newer versions of Windows to complain bitterly and attempt to restore the modified file. This is part of the whole "Trusted Computing" thing. An admin (or software running as one) can work around it, of course, but it's not trivial - those files are owned by SYSTEM, not Administrators, and while malware can certainly go through the steps required to modify the file permissions (assuming said has Admin-level privileges) it does prevent casual or accidental damage.

      I don't even know what you're talking about when it comes to "separation between privilege levels" since Windows actually has a much more powerful and fine-grained permissions system than the old POSIX standard still used by most Unix-like OSes (though SELinux and AppArmor aim to fix this on Linux). Windows' permissions system works quite well, behaving as it is supposed to. Unfortunately for ignorant users, said permissions system is supposed to allow Administrators to take over and subsequently do anything they desire with any part of the system. You'll find logging in as root gives the exact same kind of behavior. For that matter, Vista's UAC actually limits Administrators to the standard User permissions unless expressly authorized for Admin rights (makes a pretty mess of their user security tokens, but appears to work correctly).

      Additionally, the bit about "their FUBAR'd implementation" is pure bullshit. First, most programs on any OS can't be installed as a standard user (since "installed" typically means getting put in Program Files or /bin - many, on or off Windows, can be installed to a user's folder just fine without Admin privileges). Most, however, can be RUN as a standard user without any problems, whether it's from Microsoft or some ISV or a little thing you hacked together yourself. If you meant running the installer with Admin privileges from a User account, that's actually quite possible (if more annoying than it should be) on Windows prior to Vista via "Run As..." and dead easy on Vista using UAC. If you want to claim that Vista makes UAC prompts appear too often, I ask you to try two things: count the number of times you use su/sudo (or the graphical equivalent) on a Linux box, and try doing the types of things that require UAC on Vista *without* root permissions.

      Microsoft's past screw-ups on security are worthy as a historical note, but aren't even vaguely representative of the current state of Microsoft software. You're living between 5 and 15 years in the past. If Windows were as insecure as you suggest, all Windows machines ever connected directly to the Internet would be compromised now. Remarkably enough, that's not true - and it's not even entirely due to the firewall.

      --
      There's no place I could be, since I've found Serenity...
    77. Re:re Hard to decide ... by LingNoi · · Score: 1

      Your question is a bit of a con because you're making the assumption that users don't need to install new applications or admin their own PC at work.

    78. Re:re Hard to decide ... by LingNoi · · Score: 1

      Poor Linux analogy, most users get all their software from their distro.

    79. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      If it comes free with the OS it will drive away competitors because Joe-sixpack is not going to spend any money to replace something he got for free, even if it sucks.

      This happened when Word included a grammar checker way back when. There used to be a thriving third party market, but except for some niche markets, you really can't buy any more.

      Of course the one in Word has barely improved over the years, because once that feature / checkbox was taken care of, it became a low priority.

    80. Re:re Hard to decide ... by orlanz · · Score: 1

      Loved that analogy... till you said "car". What the heck, you were doing great, but then HAD to pay homage to all the OS&car analogies that came before!!!

    81. Re:re Hard to decide ... by nih · · Score: 0

      Its illogical. How can you produce a product that attacks things attempting to exploit your holes when you have the ability to patch the holes?

      no need to contaminate slashdot with such filth!

      --
      I'm a rabbit startled by the headlights of life :(
    82. Re:re Hard to decide ... by marcosdumay · · Score: 1

      "There is nothing that is inherently insecure about Windows."

      Yes there is. There are three things that are inherently insecure on Windows, the software design, the interface design and the actual implementation. Everything else is ok.

    83. Re:re Hard to decide ... by Dan541 · · Score: 1

      On the other hand you can already get very good free anti-virus

      --
      An SQL query goes to a bar, walks up to a table and asks, "Mind if I join you?"
    84. Re:re Hard to decide ... by meyekul · · Score: 1

      No, if they SOLD it, it would be par for the course. You have a good point if it was bundled with the OS, they could just make the OS resistant to viruses, but if you have to BUY the module to prevent viruses...

      1. Develop OS vulnerable to viruses
      2. Monopolize the OS market
      3. Sell anti-virus software.
      4. Profit!

    85. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      And it will be outdated as soon as it comes out, and stay outdated. Anyone remember MSAV from MS-DOS 6.20, 6.21, and 6.22?

    86. Re:re Hard to decide ... by Deathlizard · · Score: 1

      If it's going to be anything like onecare, this won't be a problem.

      If Onecare found a virus, you had to deal with it. There was no ignore option, it was either delete or quarantine.

      Of course, If it was a false positive, you were pretty much screwed. The only way I found around it was to move the file to quarantine, exclude a directory and move the false positive to the excluded directory. Although I will say that false positives under MS was less than other scanners I've used.

      Although, MS understood the Law of Stupidity (99% of computer users don't know what they are doing) very well, and designed OneCare around that measure, it was a mixed bag if you did know what you are doing.

    87. Re:re Hard to decide ... by msuarezalvarez · · Score: 1

      Please do not be thick, for it brings nothing to the discussion---your sarcasm is really quite primitive, so it does not itself add anything either. You surely read the "it throws a sudo" I was responding to...

      In any case, there is lots and lots of harm to be done by an executable with the user's privilege. For example: all of her information can be accessed at will; you can run all kinds of software,open all kind of non-priviledged ports and what not. Sure, you cannot take ownership of the whole machine, just the user. But there is lots and lots of evil to be done with that only.

    88. Re:re Hard to decide ... by msuarezalvarez · · Score: 1

      No I did not mean that, I used the wrong mark-up and a line break got lost.

    89. Re:re Hard to decide ... by msuarezalvarez · · Score: 1

      It most certainly did not "throw a sudo"...

    90. Re:re Hard to decide ... by Whiternoise · · Score: 1

      Personally i think that it should be included. It's a basic service that MS should provide. All this talk about monopolies, they really don't have one. In all fairness, the only reason that there is a market for AV products is because Microsoft never created a decent one. Why shouldn't they be allowed to make it? If i buy a PC, i would be a bit miffed if i then had to pay MORE to protect it. Granted i've not had a virus in a long time - firewall seems to cover it nicely. Sure maybe i should have to pay for a full suite with advanced controls and heuristics, but why should they not be allowed to do this? They should know better than anyone how to make an efficient AV app for their code.

    91. Re:re Hard to decide ... by Erikderzweite · · Score: 2, Informative

      Saying it doesn't do anything to your computer. If you meant typing it, than it requires a console, something Joe the Plummers are soooo afraid of...
      On a more serious note, Linux can indeed be configured to prevent execution of a file from a folder which owner isn't root.

    92. Re:re Hard to decide ... by Risen888 · · Score: 1

      I don't really think you're getting it here.

      Now I ask you, is any of the above something a normal user (without administrative rights) should be able to do?

      Of course not, that's why UAC has a password dialog to make... sure...

      Oh, wait. It's just another "Yes/No" prompt like the other three hundred you click every day. That is just mind-bogglingly stupid.

      --
      Hey, I finally got my first freak! Took you long enough!
    93. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      You are a dumbass.

    94. Re:re Hard to decide ... by internerdj · · Score: 0, Troll

      You need to update your economics model. Monopolies are the natural product of an increasing demands industry like software. They aren't bad as long as there is room in the market for alternatives to provide a better fit product, which are clearly present with both Linux and Mac OS surviving. Ever since I read the following paper, I've gotten a bit leary on how much we should attack the natural formations of the market. http://www.santafe.edu/~wbarthur/Papers/Pdf_files/HBR.pdf

    95. Re:re Hard to decide ... by Risen888 · · Score: 1

      it even has a sudo tool...it's called UAC.

      I do not think that means what you think that means.

      --
      Hey, I finally got my first freak! Took you long enough!
    96. Re:re Hard to decide ... by griffjon · · Score: 3, Insightful

      Also, remember that to really "fix" Windows, an intense redesign of user permissions and system architecture would really be needed, something that MS has yet to suck up and do, for a variety of reasons (I'd posit that they misstepped by not doing it for Vista, but that's with hindsight).

      If, however, MS wants to continue to capture the developing world market, this is something they simply had to do. The TCO of a MS deployment has a huge recurrent cost just for A-V licensing, especially when you get the low-entry-cost "Unlimited Potential" and "Starter Edition" licenses for XP.

      Now, the real question is how will McAfee respond to this? I always harbored a conspiracy theory that MS was getting some form of kickbacks from the various A-V vendors in return for not doing this exact thing.

      --
      Returned Peace Corps IT Volunteer
    97. Re:re Hard to decide ... by Risen888 · · Score: 1

      This monopoly. Please pay attention.

      --
      Hey, I finally got my first freak! Took you long enough!
    98. Re:re Hard to decide ... by Jason+Levine · · Score: 1

      a whole lot of them will sit up and take notice if their antivirus pops up and warns them away.

      My sister's computer was running slow once. I noticed that she didn't have a router, firewall, antivirus, or anti-spyware program running. So I installed a firewall, an antivirus program, and an anti-spyware program. (I also instructed her to get a router.) The scans showed multiple spyware infestations which I cleaned up with much effort. I configured her new security software and let her know what it did. My sister doesn't live near me, so I needed to take time off of Thanksgiving (or some other get together, I don't remember which one) to fix their computer.

      The next year she was complaining of a slow PC again. I look at it and all of my software was disabled. I asked how that happened and they admitted to disabling it. I sighed, re-enabled it, re-cleaned their PC, and told them *NOT* to disable it again.

      Flash forward a year or so and they're complaining about the PC being slow again. Over the phone, they admit to disabling the software. I recommended that they take it to a repair shop because I'm not touching it anymore. I don't mind fixing a friend or relative's computer once or even twice. But when you demonstrate a repeated inclination to ignore my advice and disable my safeguards because you are relying on me to get you out of any jam you get yourself in, then you lose my help.

      I'm sure a dozen or more Slashdot posters could post similar stories. Unfortunately, users seem to be more likely to see an anti-virus warning and think "I should turn that off" than think "Hey, this might be dangerous to run."

      --
      My sci-fi novel, Ghost Thief, is now available from Amazon.com.
    99. Re:re Hard to decide ... by nine-times · · Score: 1

      If they sold it, it would be a conflict of interest.

      I remember this was the complaint years ago when it was first announced that MS was working on an Antivirus (which I guess made it into Live OnceCare?). If you sell an OS and also sell the means to patch security holes, then there's no incentive to actually fix those security issues in the OS itself. Further, there's a conflict of interest in that, as the OS maker they should be open with security vendors servicing their OS, but those security vendors are suddenly competitors.

      I think that by making it free, they're dodging some of those complaints. They still run the risk of damaging the business of some of those security vendors, but I find it hard to feel bad about that. Whenever Microsoft makes Windows better, they're removing potential avenues from businesses who would want to make money by fixing Windows. They should still do it.

    100. Re:re Hard to decide ... by No2Gates · · Score: 0

      I disagree, using that same logic why do Firefox and Opera exist as browsers since MS provides IE for free? Because The other choices are better in many peoples opinions. I would not use a MS product for AV because I don't trust them to put out updates in a timely fashion.

      --
      Every time you call tech support, a little kitten dies.
    101. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      I'll have to remember that pun. I recently entered ten of my best ones into a local contest. I really thought some of them had a chance of winning but no pun in ten did.

    102. Re:re Hard to decide ... by cerberusss · · Score: 1

      No, the UAC password/confirmation prompt comes up when any of the above actions occur, otherwise not. Now, you could say that when such an action is repeated, then the user shouldn't be bothered by another yes/no prompt. I might agree with you on that point. However, that's not quite my experience. I'm using Vista for testing purposes and general stuff and I hardly get a prompt. What exactly are your daily activities that that UAC prompt keeps getting up?

      --
      8 of 13 people found this answer helpful. Did you?
    103. Re:re Hard to decide ... by jimicus · · Score: 1

      Microsoft has made (some small) improvements in these areas. But they're not off the hook by any means.

      I fear it is too late.

      Until application vendors are prepared to work with the tools the OS gives them rather than try and reinvent the wheel by applying their own hooks deep into the OS (I'm thinking particularly of DRM within games here, but there's plenty of other things to which this argument could apply), the existing security model isn't going anywhere.

    104. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      That's nice and everything, but how do you plan to implement that?

      Define "OS files".
      Define "random executables".
      Define "important system files".
      How are you going to determine which type a particular file is?
      How are you going to keep this database secure?
      How are you going to avoid false positives and false negatives?
      You are still going to need a user override, so all you have done is added one more hoop to jump through.

      "Random executables" running under Linux with root privileges can delete "OS files" and "important system files", so I'm not sure your argument makes sense. The real problem is addressed by your second point.

      I agree with the first part of your second point (Microsoft trying to be "helpful"), but I'm not sure what you mean by silent installation. An installer is just an executable; it does whatever it was written to do. The problem is that it can be downloaded and executed without interaction; this is the result of things like automatic script execution, which you already covered. So really, both parts of your second point (and also your first point) all cover the same underlying problem.

    105. Re:re Hard to decide ... by Jarjarthejedi · · Score: 1

      "Linux is the guy who drives a big truck full of car batteries to the nearest power plant, pays to charge them all up, then drives back home and hooks them up to run his house for another couple of days."

      I'm sorry...but that analogy fails epicly. If that were true it would mean that linux users would be relying on microsoft to keep their computers running, seeing as how the linux person in your analogy is driving to an MS owned power station to get power.

      I am not disputing that microsoft has a virtual monopoly in the OS market, simply that you are equivocating a virtual monopoly (monopoly by merit of having the majority of the marketshare) with a true monopoly (defined as having exclusive ownership through legal privilege). As long as alternatives exist MS does not have a true monopoly, they have what is effectively a monopoly by merit of being on most computers but that is not the same as them being the only choice.

      If MS makes too many bad calls they won't have a virtual monopoly anymore...or do you dispute that simple argument?

      --
      There are two kinds of fool One says 'This is old therefore good' Another says 'This is new therefore better'- Dean Ing
    106. Re:re Hard to decide ... by Risen888 · · Score: 1

      Sorry, I was tired when I wrote that. My point was not the number of times the prompt comes up, but the fact that it's not a password prompt. It's just a Yes/No dialog, just like any other Yes/No dialog that a user may see in their daily activities. That's not a security feature.

      --
      Hey, I finally got my first freak! Took you long enough!
    107. Re:re Hard to decide ... by carolusmagnus · · Score: 1

      You obviously don't understand what MS's market for desktop OS's is. They sell very few of them as boxed copies to individuals. They have a small market selling site licenses to corporations, but by far their largest market is computer OEMs like Dell.

      Is that the case? I thought their big revenues were from site licenses, so they could protect their monopoly by providing Windows for little or nothing to OEM's. So that the price difference between a Windows and a Linux box is in the range of $25 (Lenovo) to $50 (Dell).

    108. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      Thag not savage...Thag use Linux. Linux good, fire good, Vista bad!

      Ok, Thag go back under bridge now.

    109. Re:re Hard to decide ... by raptorjb007 · · Score: 1

      FYI, It is only a Yes/No Prompt if you are logged in with an account that has administrative privileges. Else, if running as a standard user account, as is recommended, the prompt displays a list of admin accounts to authenticate the action with and requests a password.

    110. Re:re Hard to decide ... by shutdown+-p+now · · Score: 1

      Also, remember that to really "fix" Windows, an intense redesign of user permissions and system architecture would really be needed

      How, exactly, the Windows system architecture and user permissions need to be changed to "fix" them (apart from the stuff they already did in Vista - and got bashed for)?

    111. Re:re Hard to decide ... by cerberusss · · Score: 1

      Yeah I see your point. I have to agree on that not being helpful security-wise but isn't the yes/no prompt the result as being logged in as an administrator? As a normal user, I always get a password-prompt. I'm a Linux user so I'm used to the idea of a restricted user, but AFAIK after installing, Vista creates a restricted user, not an admin account.

      --
      8 of 13 people found this answer helpful. Did you?
    112. Re:re Hard to decide ... by shutdown+-p+now · · Score: 1

      On Linux or BSD, files aren't executable by default. The OS just won't run them. Any attempt to make a file executable requires a local user to manually enter a password.

      That's just a lie. You can perfectly well make any file executable if you own it (just like you can make it readable and writable, or otherwise change permissions).

      You know, just like it works on Windows. Including the "execute" permission - yes, it also exists in Windows ACLs (so long as you use a filesystem that supports ACLs - such as NTFS).

      Of course, there's nothing wrong with files that are by their nature executable to be marked executable, either. Or are you saying that the fact that you have to manually mark the file as "executable" after e.g. downloading it in Linux before you run it somehow improves security of the OS?

    113. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      That would mean that all legacy SW, including MS's own, would stop working. They all rely on being able to write all over the system. And without backwards compatibility, what's the impetus to stay with Windows?

      Backwards compatibility is why they needed something as screwy as UAC.

      Have you even read the Windows Vista software compatibility guidelines (the ones that must be followed to get that Designed for Vista logo on the box)?

      Heck, have you even read the Windows XP compatibility guidelines?

      Not "writing all over the system" has been in there for ages. Any app with XP logo doesn't do that. Any app with Vista logo doesn't do that. No major Microsoft product does that (in fact, I don't know any that does!). Some of the worst offendors have been games, writing savegames and settings into the same folder where game is installed - but that has mostly gone away now, too (thanks in the large part to strict requirements of Vista certification and the desire to avoid annoying user with UAC prompts).

      Oh, and what's screwy about UAC? It's not in any way different from system-integrated sudo - an application can explicitly request a privilege elevation, the system will display the request to the user in a standard manner, and application either gets the go-ahead (and the elevation), or the refusal.

    114. Re:re Hard to decide ... by shutdown+-p+now · · Score: 1

      MS needs to start pushing (as in, default case) low privileges for default accounts and the ability to sudo an app up to administrator level.

      That is precisely how it works in Vista already. When UAC is enabled, the only difference between Vista user and Vista admin is that the latter does not need to enter password to elevate; otherwise, admin has the same permissions as power user IIRC, and still needs to elevate to full admin privileges to do anything dangerous. Note that it still doesn't let any random software running under such an "admin" account to quietly elevate - it still needs to ask for elevation explicitly, and the user will get the UAC prompt.

      The only difference between that and the default Ubuntu setup is that, in Ubuntu, the user is asked to enter his own (not admin's) password in the elevation prompt - and the only case I see where this is of any use is when someone else is poking around your desktop when you're away; at least it won't let them get admin access. But, aside from that, what is the point?

    115. Re:re Hard to decide ... by shutdown+-p+now · · Score: 1

      I bought myself a Linux powered Acer Aspire One [wikipedia.org], which has Linpus [distrowatch.com] installed by default. The default user can sudo anything without having to enter a password, which I think is a serious security risk.

      For a Unix sudo, it is indeed a risk, because any process can then just run sudo and get root.

      Vista UAC works differently. Its "sudo" is integrated into the system, and, so long as UAC is enabled, any request from any application to switch to root permissions will still result in at least a "yes/no" prompt, even if the process is running under an "Administrator" user account.

      There are still accounts that get virtually full system access, such as Local Service. But you can't install an application to run under Local Service from a non-admin account, and even from an admin account, it would require an UAC confirmation.

    116. Re:re Hard to decide ... by 99BottlesOfBeerInMyF · · Score: 1

      "Linux is the guy who drives a big truck full of car batteries to the nearest power plant, pays to charge them all up, then drives back home and hooks them up to run his house for another couple of days."

      I'm sorry...but that analogy fails epicly. If that were true it would mean that linux users would be relying on microsoft to keep their computers running, seeing as how the linux person in your analogy is driving to an MS owned power station to get power.

      Actually, no the analogy holds up to that point. I likened MS's desktop OS monopoly to the power distribution monopoly. Not to the power generation market which in most locations is not monopolized because federal and state regulators require the heavily regulated distribution monopolies to buy power from any and all generators of power. To the average user these two markets appear to be the same since you only pay one power bill (just as the average user just buys a computer for one price, not a computer and an OS separately). Mind you, this is only an analogy. In many cases power generators and power distributors are owned by the same corporation and there have been numerous instances of criminal price fixing and collusion between them. That said, my analogy was sound. The average user in both cases buys a product composed of a monopolized product (power distribution or a desktop OS) bundled with a non monopolized product (power generation or a home computer). Linux allows the user to bypass most of the monopoly through their own work, just as charging batteries and transporting them in a truck allows a person to bypass the power distribution monopoly.

      I am not disputing that microsoft has a virtual monopoly in the OS market, simply that you are equivocating a virtual monopoly (monopoly by merit of having the majority of the marketshare) with a true monopoly (defined as having exclusive ownership through legal privilege). As long as alternatives exist MS does not have a true monopoly, they have what is effectively a monopoly by merit of being on most computers but that is not the same as them being the only choice.

      By your definition there will never ever be a "true" monopoly. This is perilously close to the no true scotsman fallacy.

      If MS makes too many bad calls they won't have a virtual monopoly anymore...or do you dispute that simple argument?

      From the end user's perspective, MS has been making bad calls for a decade or more and they still have their monopoly. Unless regulators/governments step in or a disruptive technology emerges, MS will not lose their monopoly regardless of how terrible the products they make are.

    117. Re:re Hard to decide ... by bill_kress · · Score: 4, Insightful

      How did you get the ICQ password? If it was used by the trojan to log into an ICQ account and send messages, then after you changed it no other clients would have been able to send messages.

      It's a good story, but smells a little fishy right there...

    118. Re:re Hard to decide ... by quanticle · · Score: 1

      Good viruses do not make themselves known in ways that script kiddie viruses do.

      Given the quality of modern popular anti-virus (e.g. Symantec, McAfee, etc.) they probably wouldn't get warnings even with the software.

      --
      We all know what to do, but we don't know how to get re-elected once we have done it
    119. Re:re Hard to decide ... by AnotherDaveB · · Score: 1

      But you can't install an application to run under Local Service from a non-admin account, and even from an admin account, it would require an UAC confirmation.

      I've been using XP Home a little recently (new netbook), and this is annoying the dickens out of me.

      On a Mac, a non-admin user would be prompted for an admin user name & password to install an application. On the XP machine, I have to either log in as admin to install something, or change the non-admin account to an admin account.

      I realise I may well be preferring what I'm used to, but I feel the Mac system - prompting for an admin's OK - is better.

    120. Re:re Hard to decide ... by 99BottlesOfBeerInMyF · · Score: 1

      You need to update your economics model. Monopolies are the natural product of an increasing demands industry like software.

      Monopolies are the natural product of any free market. Unfortunately leveraging monopolies makes said market unstable and undermines the benefits of competition. This has been well understood for hundreds of years and is the reason we made antitrust laws in the first place.

      They aren't bad as long as there is room in the market for alternatives to provide a better fit product, which are clearly present with both Linux and Mac OS surviving.

      Ouch, way to fail at understanding what defines a market in economic terms. Can Dell and HP and Sony license OS X for inclusion in their computers? I didn't think so. OS X is not a direct competitor in the market. Linux has basically no market share to speak of and is copyleft licensed specifically to avoid it ever being a financial competitor to Windows (and thus survive in a monopolized environment). You'll need to do a lot more than assert that Windows has valid market competitors, when every court it has come before has ruled otherwise.

      Ever since I read the following paper, I've gotten a bit leary on how much we should attack the natural formations of the market.

      I read the paper (I'm a speed reader). It looks to me like he argues against breaking up monopolies, but I see no arguments against prosecuting antitrust abuse that leverages those monopolies into new markets (the major problem with monopolies). Further, he fails to address the ineffectiveness and slow movement of the courts in response to antitrust abuses, which has resulted in markets being completely destroyed for years before the courts even address the issue. Basically, it sounds like another Greenspan fan trying to make the same arguments that have been disproved by the real world. In short, I don't see that paper arguing against prosecuting MS for bundling into the antivirus market, just arguing (poorly) that MS should not be broken up when they are convicted.

    121. Re:re Hard to decide ... by 99BottlesOfBeerInMyF · · Score: 1

      Is that the case? I thought their big revenues were from site licenses, so they could protect their monopoly by providing Windows for little or nothing to OEM's.

      The last statement I saw OEM was still number one pulling in more money than site licenses, business services, and other business software sales combined.

    122. Re:re Hard to decide ... by shutdown+-p+now · · Score: 1

      I've been using XP Home a little recently (new netbook), and this is annoying the dickens out of me.

      I described Vista behavior in my earlier post in the thread. XP has no UAC - it's a Vista feature. On XP, yes, you have to use "Run As" all the time (and then deal with its quirks, such as the fact that all spawned child processes get de-elevated). On Vista, you just get a prompt, the same as on Mac.

    123. Re:re Hard to decide ... by Zeio · · Score: 1

      MSAV (Microsoft Anti-Virus) came with MS-DOS 6.x. This was a version of Central Point Anti Virus.

      http://en.wikipedia.org/wiki/Microsoft_Anti-Virus

      It hardly caused the Anti-Virus as we knew it then (for Joe Six Pack or otherwise).

      --
      Legalize the constitution. Think for yourself question authority.
    124. Re:re Hard to decide ... by shaitand · · Score: 1

      I'm a PC tech as well and its not merely a locality bias. I service a number of individuals and businesses.

      In my experience the customers who get infected with tons of spyware regularly are the ones who browse and/or download more not those who fail to practice safe computing practices. Nobody practices safe computing practices intentionally.

      Ultimately it simply comes down to exposure. The older users get infected less because they generally visit a fixed set of content. This is true of many office workers as well. They may not browse much, or only check email, or they have the browser open all day but only use 5 sites. Those users only get nailed by worms. Everyone else gets hammered by spyware.

    125. Re:re Hard to decide ... by duckInferno · · Score: 1

      Does that mean Linux shouldn't support anything outside its distro?

      --
      Fool me once, shame on you. Fool me twice, watch it -- I'm huge!
    126. Re:re Hard to decide ... by jbengt · · Score: 1

      GP was about how users tend to click thru AV warnings when installing software, so, yeah, those used to UAC warnings are gonna have extra training to just click thru if the AV pops up a warning, too.

    127. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      I'm confused... how is entering a password different than clicking a button? Isn't what you're describing just a more drawn out form of UAC?

    128. Re:re Hard to decide ... by Anonymous Coward · · Score: 0

      >That's just a lie. You can perfectly well make any file executable if you own it (just like you can make it readable and writable, or otherwise change permissions).

      It is not a lie, and you have managed to contradict yourself between your first and second sentences.

      When you create any new file, or copy on on to your Linux system, it will not be marked as executable. This is the "default" state of the new file. You have to explicitly mark it as executable before the system will run it.

      >Or are you saying that the fact that you have to manually mark the file as "executable" after e.g. downloading it in Linux before you run it somehow improves security of the OS?

      Correct. The important bit is "manually". The other important bit is "local user must manually have supplied a local password". The last important bit is "file only achieves execute permissions equivalent to the privelege level of the user".

      Putting those three together means that no external party can either put a new file onto the system or give that file local execute permissions without knowing any local machine password. As long as only local users know the local machines password, then said local users are going to have to be the ones to manually enter that password in order for any new file on the system to gain execute permissions.

      The system security then rests on the security of the local accounts passwords. If an external party can obtain or guess a local passwrod, the security is of course bypassed ... but that is true for any system.

    129. Re:re Hard to decide ... by pngmangi42 · · Score: 1

      See, the problem is that it's Joe Sixpack. If it was just Joe One Beer, he would be sober enough to realize what he was doing...

      --
      I tried to walk into Target, but I missed. --Mitch Hedburg
    130. Re:re Hard to decide ... by DrSkwid · · Score: 1

      you did, perhaps the touch failed

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    131. Re:re Hard to decide ... by Tubal-Cain · · Score: 1

      Flawed analogy. It's like selling car tires, then charging extra for a nail-proof coating.

      And the street is full of nails. In fact, there is a sea of road tacks situated just outside the parking lot.

    132. Re:re Hard to decide ... by thePowerOfGrayskull · · Score: 1

      nope, we're pretty safe. I'll run AV once a month or so from linux boot, to make sure that nothing (detectable) has snuck in. 20 years and counting virus (and anti-virus) free...

    133. Re:re Hard to decide ... by shutdown+-p+now · · Score: 1

      Correct. The important bit is "manually". The other important bit is "local user must manually have supplied a local password".

      The local user won't have to supply a local password if he does chmod +x on a file he owns. He will only need to sudo (and then supply a password) if he tries to change permission on a file that he does not own. If he himself had just downloaded the file, then, no, he won't need a password to make it executable (and nor will any code that's running with his permissions).

      The last important bit is "file only achieves execute permissions equivalent to the privelege level of the user".

      Not at all. A user can chmod +x a file that he owns, and if the root will then run the file, that file will run with root permissions. There is the setuid bit to force running under owner permissions, yes, but it is not set by default.

      Putting those three together means that no external party can either put a new file onto the system or give that file local execute permissions without knowing any local machine password.

      No external party can put a new file onto the system anyway unless you let it - there's no magic means to put a file on a local FS without having credentials of some user that has write permission there. And if you do so, depending on the way you do that, you can perfectly well get an executable file in the process - for example, if you unpack a .tar file, an executable can be extracted from it with x-bit set.

      Of course, even if someone manages to put a local executable file onto your system via some open channel (e.g. a read/write NFS or SMB share), then what? He won't be able to execute it, anyway - a local user would still have to do that. And, once a local user starts running random programs that he doesn't know anything about, you can consider security bypassed on any system, whether Windows or Linux (on the latter, assuming the user is gullible, you can always trick him into running "sh" on your malicious script even if the latter is not executable).

    134. Re:re Hard to decide ... by leedsj · · Score: 0

      A modern retelling of the AV That Cried Wolf. This is why it needs to be built into the O/S and automatic... most people cannot decipher even the simplistic of technical messages, they just want their machine to WORK and not ask 'hard' questions.

    135. Re:re Hard to decide ... by nsteinme · · Score: 1

      It's possible each client has its own ICQ account and therefore, password.

      --
      call me FOSS im the boss with the sauce and the source
    136. Re:re Hard to decide ... by aqk · · Score: 1

      Power company shipping me an emergency generator??

      Sounds good to ME!

      I had to go out and damn well BUY ONE!
      And so did all my neighbours.

      Too bad MS isn't the power company. So far both XP and Vista are much more stable than my power utility. That's why I had to buy a damn UPS! ... poor analogy.
      And say- whatever happened to GM? If MS had run them, they would still be in business. You don't see the fed govt bailing out MS!
      Remember that old joke about "If your Windows was a car...".
      Don't hear it much these days, do we?

      BAH!

    137. Re:re Hard to decide ... by aqk · · Score: 1

      Windows is made for idiots.
      That's why it is so easy to break.
      And that is why it is used by most of the world.
      Folks who dont know a grep from a gram.

      Imagine the whole world running Linux:
      "Hey, what's this SUDO crap? And why do I always hafta give my password?"
      Well she will give that password anyhow. She's been trained to do it. To hell with weenie geek stuff.

      But linux is hard. That's why so few people use it. And nominally intelligent people at that.
      How many Linux weenies you see answering a 419 chain-letter?
      None.
      If you want to make the rest of the world run Linux, you will have to relax some of the arcane command-level stuff.
      And then guess what? It will start crashing /getting infected just like Widows does.
      You cannot have it both ways.

         

    138. Re:re Hard to decide ... by techno-vampire · · Score: 1
      If you want to make the rest of the world run Linux, you will have to relax some of the arcane command-level stuff.

      Actually, you can do without it completely for the most part if you use a distro like Ubuntu, that's designed with that in mind. On the whole, though, I agree with you. Linux is for people who want to be able to control their computers and to decide for themselves what it looks like and what programs it uses. Windows is for the rest of them; it's the OS for people who don't want to know what's going on, don't want to choose or even know that there's a choice, people who want to be told what to use. And, because of that, it will always have a bigger market share than Linux. The Year of the Linux Desktop will also be the year that Linux users had to start using an anti-virus, and I'd rather not have that happen, TYVM.

      --
      Good, inexpensive web hosting
    139. Re:re Hard to decide ... by polymerousgeek · · Score: 1

      Linux is the guy who drives a big truck full of car batteries to the nearest power plant, pays to charge them all up, then drives back home and hooks them up to run his house for another couple of days.

      Ummm...what?
      I agree with your point: Microsoft has a monopoly. But frankly, your analogy is crap. Even ignoring the implication (rather, the declaration) that linux is somehow dependent on Microsoft, the whole "power-plant-versus-batteries" thing seems to boil down into:

      1. Linux (battery) is less reliable than MS (power plant)
      2. Linux users must pay/go out of their way far more than MS, especially if they want it to keep working (see #4)
      3. Linux requires constant maintenance, even if nothing is broken
      4. MS somehow provides an all-important service that a) you must keep paying for, and b) everything relies on (meaning as soon as you stop getting/buying it, 100% of stuff just stops).
        Apple and Linux somehow don't: they just have temporary/inconsistent/expensive...things.
      5. Linux is apparently a MASSIVE pain in the ass

      you fail.

      --
      53 49 47 53 20 53 55 43 4B
    140. Re:re Hard to decide ... by bill_kress · · Score: 1

      true dat, but if that were the case he wouldn't have been able to see the other machines communications.

      Sounds like a urban legend told in the first person... And the guy never replied..

    141. Re:re Hard to decide ... by Lucky75 · · Score: 1

      Very true :) That's why I use NOD32 on my windows boot. Of course, I refuse to install Symantec on principle, since using rootkits in a virus scanner is a bit....hypocritical.

      --
      DNA -- National Dyslexic Association
    142. Re:re Hard to decide ... by rrohbeck · · Score: 1

      Doesn't Matter. There are lots of old apps from W2k times and earlier and MS fears to make a clean cut.
      And it's standard practice for an installer to drop files in system folders, even today. Hence, no Unix style user/root distinction can be made.

  2. About bloody time by jaxtherat · · Score: 4, Insightful

    That's all I have to say.

    --
    http://www.zombieapocalypse.tv/
  3. Yeah, but by NoStrings · · Score: 5, Funny

    Does it run on Linux?

    1. Re:Yeah, but by Technician · · Score: 1

      Does it run on Linux?

      More importantly, does it make Windows as secure out of the box as Linux?

      --
      The truth shall set you free!
    2. Re:Yeah, but by superphreak · · Score: 1

      Linux comes in a box? ;)

      --
      Evolution is a state-sponsored, state-protected religion.
    3. Re:Yeah, but by Enderandrew · · Score: 1
      --
      http://blindscribblings.com - Tasty pop-culture in conceptual fashion.
    4. Re:Yeah, but by dbIII · · Score: 2, Insightful

      To be quite serious I use f-prot for linux on my mailservers and they are not unique in having linux antivirus software. It's nice to handle the malware with an OS that isn't compatible with it.

    5. Re:Yeah, but by svank · · Score: 1

      Well, my Bittorrent client is shaped like a box when I open it...

  4. The real question is... by Anonymous Coward · · Score: 1, Funny

    ...will Morro detect and remove Vista?

    1. Re:The real question is... by Enderandrew · · Score: 1, Funny

      Well a virus is an irritating program that eats up resources, making your computer unstable, interfering with hardware, replicates and repairs itself when you attempt to delete it, and drives you insane.

      I can't imagine why someone would describe Windows as a virus.

      --
      http://blindscribblings.com - Tasty pop-culture in conceptual fashion.
    2. Re:The real question is... by British · · Score: 5, Insightful

      Well a virus is an irritating program that eats up resources, making your computer unstable, interfering with hardware, replicates and repairs itself when you attempt to delete it, and drives you insane.

      The sad thing is, a lot of system-tray startup software that insists on self-installing does the same things too. No acrobat, i don't need to be running all the time. You listening, Apple? Heck, a lot of AVG software bogs down the system so much I'm wondering if the cure is worse than the disease.

    3. Re:The real question is... by SyscRAsH · · Score: 1

      you just described Symantec Endpoint Protection

    4. Re:The real question is... by ShadowBlasko · · Score: 1

      The real question is .. Will it run on 64 Bit Vista .. Which is where I cant find ONE DECENT DAMNED VIRUS SCANNER that works. Not one. Pissing me off

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order- Ed Howdershelt Via Tass
    5. Re:The real question is... by geminidomino · · Score: 1

      Heck, a lot of AVG software bogs down the system so much I'm wondering if the cure is worse than the disease.

      I've recently come to the conclusion that it is. I've had my girlfriends, brothers, and mother change to AntiVir since AVG started slowing their machines to a crawl and hooking into their browsers.

    6. Re:The real question is... by Anonymous Coward · · Score: 0

      You're not kidding. I refuse to run antivirus on my home computer due to the resources required. I instead run my base OS (XP Pro) with virtual machines. One for my work VPN. Another for my browsing. The only thing I run on the base is VMWARE and some games. I've been running like this for about 2 years now without infections. I'm VERY cautious due to this practice. I don't just rely on AV software to keep safe. I know I'm not safe so I'm more careful.

      That said, I also run a firewall/ids combo that might alert to possible infection. I also use an host based IDS (OSSEC) to alert me to changes to my system...

      Of course I use AV at work. Symantec Endpoint with all features, strict group policies, strict proxy as well as multivendor AV gateway AV/content/firewall filtering. And they still get infected sometimes... (adobe flash holes... those fuckers. Give me a corporate update server!)

    7. Re:The real question is... by Anonymous Coward · · Score: 0

      Your worried about the system tray?

      Thats just the notification application.

      Lets try the services that constantly run in the background that check for god knows what, the start up exe's, the 2 BHO's, shell extension and then the launch checks.

      Would you like quicktime with that upgrade?
      I'm looking at you too google and your shinny new webbrowser.

      It's bad enough everytime i open firefox it and a dozen plugins want to update themselves.

      I've basically stopped installing applications, if it isn't a game or doesn't run portable or i can't compile it and isn't from Microsoft directly it goes into a virtual. Otherwise in 6 months I have a bloated mess.

      At least when Microsoft releases an antivirus software it'll update itself with the one service windows already has for this and it most likely won't affect system performance to the point you want cut your wrists trying to safe a few files.

      Microsofts did a decent job with "Windows Defender", i'd like to see that get extended it's far from perfect and hijackthis still wins but with strong file system and user permissions anti-virus isn't really a problem, I can't remember the last time i saw a real virus anywhere that wasn't self inflicted.

    8. Re:The real question is... by superdave80 · · Score: 1

      Heck, a lot of AVG software bogs down the system so much I'm wondering if the cure is worse than the disease.

      Amen. I've seen too many of my friends' and family's computers brought to a near standstill due to their AV software constantly scanning/warning/updating. When they ask me to fix it, the first thing I do is uninstall that crap (which usually came pre-installed on the machine).

      I haven't run any kind of anti-virus/system protection software for at least five years, with no viruses to date. Just avoid IE and Outlook, keep Windows patched, and don't install ANY kind of crap toolbar/weather update/random tray widget. It's not perfect, but neither is the protection of AV software.

    9. Re:The real question is... by Idiomatick · · Score: 3, Insightful

      If you think AVG is bad install NortonAV. You I've never EVER seen a computer with worse virus problems then the resource hogging that AV does. I've cleaned 500+ infected machines and NOT a single one was as screwed up as just installing norton. If you use FF you don't get popups from the virus anyways. The only real problem is if the pc is added to a botnet. I'd only recomend norton to the worst 1 of 30 users. I mean they'd have to be dling kiddie porn labeled as pron.jpg.exe through IE 1.0 while uninstalling windows patches and opening every attatchment they find while shitting on hackers. (Having worked tech support yes i do believe 1 in 30 people are that stupid)

    10. Re:The real question is... by nabsltd · · Score: 2, Funny

      No acrobat, i don't need to be running all the time. You listening, Apple?

      Apple might be listening, but it's unlikely they can do anything about Adobe Acrobat starting when you log in to Microsoft Windows.

    11. Re:The real question is... by techno-vampire · · Score: 2, Insightful
      I'm wondering if the cure is worse than the disease.

      The cure, of course, would be to use an OS that was designed with security in mind, and patched as quickly as possible when a security vulnerability turned up. Anti-virus software isn't a cure, it's a band aid, and it's always going to be at least one step behind the black hats. There's no way it can work, let alone be effective, without using up system resources, and from what I gather, getting more bloated, more of a resource hog and less effective as time goes on. I say I hear, because I don't use anti-virus software, I use Linux and as long as The Year Of The Linux Desktop never comes, I'll never need to worry about getting infected.

      --
      Good, inexpensive web hosting
    12. Re:The real question is... by gooman · · Score: 1

      ESET Nod32 has AV for Vista64
      http://www.eset.com/
      Very light on resources too.

      --
      "Kittens give Morbo gas!"
    13. Re:The real question is... by ShadowBlasko · · Score: 1

      But that is running hybrid, which brings everything down to 32bit when it is running. (Or so I have been led to believe)

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order- Ed Howdershelt Via Tass
    14. Re:The real question is... by hemorex · · Score: 1

      It's not just AVG! I've yet to see an antivirus product that causes less slowdown than malware. Now, granted, I haven't been 'in the wild' so much these days, but it seems that the trend is toward keeping the machine functional enough that it can be used in a botnet rather than just randomly trashing data and such... and given that these sorts of attacks are either fairly simple to clean up, or not handled or detected by antivirus products... what the heck is the point?

    15. Re:The real question is... by HeronBlademaster · · Score: 1

      We used to run NOD32 at work and we all hated it... we felt like it hogged resources, actually.

    16. Re:The real question is... by gooman · · Score: 1

      You are correct. It is a hybrid application. I have been running with it for about a year on Vista64. I have no complaints so far.

      They claim (as copied from their website):

      ESET NOD32 Antivirus 3.0* is a hybrid program in that it contains both 32-bit and 64-bit program code. The engine and interface modules used by ESET NOD32 to protect a system from malware are the result of years of development to create highly-optimized x86 assembly language code. During testing, it was discovered that recompiling certain portions of the program to 64-bit code resulted in increased memory usage with no discernable improvement in performance, stability or reliability.

      When a 64-bit interface needs to be monitored, such as for on-access or Windows Socket layer scanning, 64-bit code is used to do so. As evidenced by ESET NOD32's high scanning throughput and detection rate under 64-bit operating systems, this does not cause any complications.

      The general rule-of-thumb for ESET NOD32 Antivirus 3.0 is that parts of the program which need to run as 64-bit do, while parts which have no advantage running as 64-bit remain 32-bit code.

      --
      "Kittens give Morbo gas!"
    17. Re:The real question is... by polymerousgeek · · Score: 1

      A while ago, I went through a disabled nearly every startup item, service, etc. in windows (XP Pro SP2), uninstalled tons of useless crap (Adobe, apple*, avg, every MS thing I didn't recognize), and chopped my swap file down to almost the bare minimum.
      Although I very rarely use windows, whenever I do, it boots (WinXP splash screen to login screen) in well under 10 seconds. My Ubuntu 8.04 install on the same box takes about 20-25 seconds to boot.

      --
      53 49 47 53 20 53 55 43 4B
    18. Re:The real question is... by drx · · Score: 1

      You refuse to run AV because of system ressources and instead use virtual machines? HAHAHAHAHAHAhAhAHAhaHA ahaAha sorry mate .. hahaha

    19. Re:The real question is... by Vaeil · · Score: 1

      Shhhh, don't tell, but he was referring to Adobe and Apple as separate tray icons.

    20. Re:The real question is... by Anonymous Coward · · Score: 0

      clam av

    21. Re:The real question is... by Anonymous Coward · · Score: 0

      You should look up NortonAV 2009. It looks like Symantec actually put some effort into making it more efficient. Link: http://www.pcmag.com/article2/0,2817,2330024,00.asp. I understand that PC Magazine may not be the utmost authority on application efficiency, but it's what I had handy. :)

    22. Re:The Real Question Is... by marcosdumay · · Score: 1

      Hey, all hardware sellers that I know are infected by that virus you cite. I didn't know that it self propagated, but looking that way makes perfect sense, since I have to clean every computer I buy from any of them.

    23. Re:The real question is... by online-shopper · · Score: 1

      Agreed, Symantec and Norton are useless. When I ran tech dept for a school I moved from symantec precisely because of all the viruses it missed. I did find Sophos to do a fair job, and the central command center made it easy to have the machines start at 0600, virus scan, etc at 0615 ready to go by 0700 when the teachers started filing in.

    24. Re:The real question is... by shutdown+-p+now · · Score: 1

      And once you get sick of NortonAV, install NOD32 to see how fast a well-written anti-virus can actually work.

    25. Re:The real question is... by Anonymous Coward · · Score: 0

      Actually Norton Internet Security [sic] provides excellent anti-virus protection. When your CPU is 100% consumed by the anti-virus product itself, there's no place for malware to actually execute! It's actually a brilliant piece of engineering, when you think about it.

      So much so, that I have taken to applying the same principle to real-life virii using alcohol in my bloodstream. Thanks, Symantec!

    26. Re:The real question is... by Caetel · · Score: 1

      I'm going to call BS. You've never seen a computer where the results of the virus infection are worse than Norton? While I'll completely agree that Norton is a horrible product, (very ineffective in my experience, resource hungry - try running it on a single core XP installation with 256MB RAM) you've got malware which will take 100% CPU time constantly, completely stop explorer.exe from loading, pester you every 2 minutes to purchase it and that's only visible effects, not counting what it's doing behind the scenes (keylogging, sending spam, etc.)

    27. Re:The real question is... by AnymouseCowhead · · Score: 1

      These programs are hogging system resources so the viruses can't run!

    28. Re:The real question is... by polymerousgeek · · Score: 1

      I recall a system on which a (questionable) video codec had been installed (this computer ran norton '03 or so). I had the hardest time cleaning it off, but after a couple weeks, I had mostly destroyed it, everything except the original installer, not that it did anything except sit there (this was before I knew anything about linux). About 3-4 months later, after running countless virus scans and turning up nothing, norton informed me that it had found an infected file: the installer. "Yes, I'd very much like to remove/destroy it." "We're sorry, but we don't seem to be able to remove that file. Would you like start bashing your head into the keyboard while screaming profanities?" "Yes, I'd very much like to, thank you."

      damn norton, only thing it does is make microsoft look good.

      --
      53 49 47 53 20 53 55 43 4B
  5. Microsoft Linux by Anonymous Coward · · Score: 0

    That's right, Microsoft's just the latest to roll they're own distro.

  6. Bad ... by Anonymous Coward · · Score: 0

    ... and the L-Albemarle-Cojimar virus will attack and succeed.

  7. Security vs backwards compatibility by White+Flame · · Score: 4, Interesting

    Microsoft has done enough to break backwards compatibility already. They should just go the whole hog and on their next iteration, do a ground-up security analysis and refactoring of their OS, instead of trying to prevent & remove malware that latches onto existing API problems that some software might use legitimately.

    It wouldn't be impossible to give private sandboxes to "legacy" apps that don't use the new secure APIs.

    1. Re:Security vs backwards compatibility by ushering05401 · · Score: 0, Offtopic

      Sandboxes for legacy apps will remind consumers that they didn't want to upgrade in the first place.

    2. Re:Security vs backwards compatibility by 77Punker · · Score: 2, Insightful

      Sandboxes for legacy apps will remind consumers that they didn't want to upgrade in the first place.

      Of course, they can't help but upgrade since their new computer came with the new Windows and they're not going to go spend $100 on XP since they already have an OS.

    3. Re:Security vs backwards compatibility by Nico3d3 · · Score: 4, Interesting

      Couldn't have used better words to describe what I was thinking. Instead of reusing and unsecured platform for every new Windows version, why not start something completly from scratch like Apple did. We were able to use the Classic environnement in OS X when we needed old app compatibility and it didn't cause any security concerns because the OS9 program were running in a sandbox. The Classic environnement disappeared in OS X Leopard but, we can still use Sheepsaver emulator if we really need OS9. It wouldn't be the first time they copy Apple anyway ;-)

    4. Re:Security vs backwards compatibility by Enderandrew · · Score: 1

      Honestly, Microsoft should build upon a BSD-type kernel the way Mac OS X did. They can keep it close-source, and build as much of the Windows API on it as the want, or develop a new API from the ground up. The EU can't bug them about interoperability anymore, the system will be easier to administer and secure, support won't cost Microsoft as much, and backwards compatibility can be handled in sandboxed emulation layers.

      It makes entirely too much sense, but Microsoft is so worried about appearance and killing companies like Apple and Google that they'd never take such a logical step.

      --
      http://blindscribblings.com - Tasty pop-culture in conceptual fashion.
    5. Re:Security vs backwards compatibility by quanticle · · Score: 1

      Not necessarily. As I recall, Apple ran OS 9 apps in a sandboxed/emulated environment after they made the switch to OSX (but before they made the switch to Intel chips), and there wasn't too much complaining.

      Of course, I'm not really attuned to the Mac end of this business, so I might just be misinformed.

      --
      We all know what to do, but we don't know how to get re-elected once we have done it
    6. Re:Security vs backwards compatibility by dreamchaser · · Score: 2, Insightful

      The NT kernel isn't the problem really. They don't need a new kernel, they just need far better auditing of the attendant software that surrounds it.

    7. Re:Security vs backwards compatibility by postbigbang · · Score: 2, Insightful

      It wasn't from scratch, although it *was* useful. Legacy compatibility will always be a tough one-- but why should we constantly have to continue to buy upgrades anyway? Why is there a MacOS 10.5? The others were no good? Windows 7-- because the other six sucked?

      We want life. We want to extend our investments for as long as its reasonable and especially beyond the tax depreciation life if we can. Free virus software is backhanded at best from Microsoft. Watch it become a target in and of itself.

      --
      ---- Teach Peace. It's Cheaper Than War.
    8. Re:Security vs backwards compatibility by Anonymous Coward · · Score: 2, Insightful

      The NT kernel isn't the problem really.

      Exactly. The NT kernel is actually really, really good. I am sure that within Microsoft, the people who engineer the kernel probably despise the user interface people.

    9. Re:Security vs backwards compatibility by mevets · · Score: 3, Insightful

      Isn't this what OSX currently does - not for classic, but for windows via parallels, virtualbox, vmware, ... Windows apps are the "legacy".

      For Microsoft to inflict so much native breakage on the app base would cut off their own air supply. A marketing decision by Apple to unbundle OSX, or a Linux distro would have the same footing as Windows. Microsoft would have to compete for the first time in 25 years. I really doubt they would take the risk.

      To natively maintain the current APIs may not be possible without maintaining huge vulnerabilities. Maybe it is, but obviously it wasn't originally understood and I doubt it 13 years of security hacks have helped that understanding.

      Anti-virus software may be the only marketable solution, but is always one step behind.

    10. Re:Security vs backwards compatibility by fuzzyfuzzyfungus · · Score: 1

      MS is going to have to do something like that sooner or later(though I'm guessing it will be actually from scratch, say .net grafted onto one of the minimal NT kernels they keep around); but there is one aspect of a lot of legacy Windows software that will really end up being tricky.

      Because of DRM, a lot of software that, for its own operations, has quite modest needs(just ordinary system APIs), also comes with a bunch of extras that are deeply buried in the OS and deliberately paranoid and brittle. In order to support quite a few common and popular programs, a Windows legacy sandbox would have to replicate a legacy windows environment, including provisions for installing kernel drivers and similar.

    11. Re:Security vs backwards compatibility by PatDev · · Score: 1

      It wouldn't be impossible to give private sandboxes to "legacy" apps that don't use the new secure APIs.

      Indeed, and some previous versions of windows did exactly the same thing - they had a mode for running DOS executables that needed access to the whole system. The same will happen as happened then - trojans that want to access the old API's... still can. All we've achieved is forcing much code rewriting while preserving our vulnerability to malicious code 100%.

    12. Re:Security vs backwards compatibility by Rakishi · · Score: 1

      Why would they bother complaining, it's not like they had any alternatives which is the difference from windows. If you wanted a new mac then you got OS X. If you didn't like it then tough luck, learn to like it or stop buying apples computers. Microsoft on the other hand doesn't control the hardware and people are free to use any version they want on new hardware. I can run XP on a computer that came out a year after Vista without any trouble but I can't run OS 9 on a mac that came out after OS X.

    13. Re:Security vs backwards compatibility by Z34107 · · Score: 1

      Microsoft has done enough to break backwards compatibility already. They should just go the whole hog and on their next iteration, do a ground-up security analysis and refactoring of their OS, instead of trying to prevent & remove malware that latches onto existing API problems that some software might use legitimately.

      That was kind of the point with Vista. But, since most of the changes were "under the hood," people deride it as nothing but XP + bloated eye candy. Especially considering how unusable it was prior to SP1.

      I mean, things like randomizing the addresses of system libraries in memory or Kernel Patch Protection or whatever the heck they're calling it now are/were great ideas, and it's about time that they implemented them. But, anti-virus vendors whined about KPP, and it was nerfed hardcore in a patch. (Bonus points for WoW-speak in an unrelated topic?)

      Perhaps they could do a better job "breaking" things in Windows 7, and have "give private sandboxes to 'legacy' apps that don't use the new secure APIs." Something like Wow64:32-bit apps::sandbox:legacy apps. But, Windows 7 is looking more like "Vista REALLY-GOOD edition" than "omg break everything again for security" edition.

      --
      DATABASE WOW WOW
    14. Re:Security vs backwards compatibility by Idiomatick · · Score: 1

      Mac users aren't used to being given choices so they probably were cool with it.

    15. Re:Security vs backwards compatibility by quanticle · · Score: 1

      You can run XP on a new computer because you're tech-savvy enough to know how to wipe the install and reinstall a different OS. But does that describe the average user? I don't think so. After all, we're dealing with a population where nearly 70% need help to get things working right in the first place. For those people, wiping Vista and reinstalling with XP is the psychological equivalent of climbing a mountain. It may be difficult and rewarding, but its much easier to stay on the plains and whine about how much things suck.

      --
      We all know what to do, but we don't know how to get re-elected once we have done it
    16. Re:Security vs backwards compatibility by nabsltd · · Score: 2, Insightful

      In order to support quite a few common and popular programs, a Windows legacy sandbox would have to replicate a legacy windows environment, including provisions for installing kernel drivers and similar.

      With the state of virtualization technology today, the only tricky part is figuring out the best way to allow the sandboxed app to communicate with other apps (either native or in their own sandboxes) in only completely safe ways.

      In other words, if the sandboxed app tries to enumerate all running applications, it would see only itself (and maybe a virtualized Explorer), or if it tried to read the raw display to see if other windows were there, it would see itself and a virtual desktop. Then, only things like the clipboard would get shared with other apps.

      In general, this is just fine. There are very few apps that require more communications with other apps, and most of them are system apps that will be re-written as native. For a "single" application that is really multiple running programs, you'd allow the user to build sandboxes that hold multiple apps of their choosing.

      With all of these apps running on the desktop as if they were native, the user probably won't be able to tell the difference between a legacy sandboxed app and a native one.

    17. Re:Security vs backwards compatibility by armanox · · Score: 1

      I'm still running OS 9 in "Classic" Mode on my Mac for some apps. Like Photoshop, for example. And it runs just fine (OS 10.4, 800MHz G4 w/ 768MB PC133 RAM). And by doing so they avoided breaking backwards compatibility for many years (OS X debuted in 1999 on server, 2001 on desktop).

      --
      I'm starting to think GNU is the problem with "GNU/Linux" these days.
    18. Re:Security vs backwards compatibility by prockcore · · Score: 1

      Yeah, but Apple hasn't sold a computer in 2 years that is capable of running OS9 apps.

    19. Re:Security vs backwards compatibility by cbhacking · · Score: 1

      You seem to be confused about what exactly most of the work on Vista amounted to (and one of the main reasons for its delays). Vista was built with a ground-up re-examination of their code for security. Changes the blocked out insecure stuff broke a lot of programs that were using legacy APIs in an insecure way. They then provided a collection of compatibility shims for legacy programs (which will allow most legit programs to run, if you put forth the effort to try). Some virtualization is also used for security, though a number of apps require real access.

      Out of curiosity, how do you suggest your "sandboxes" work? The very idea behind sandboxing apps is that they don't have the ability to do anything they might want to, and must live with that. This is usually fine for apps that were designed with these limitations in mind (see Java, but also the number of Java programs that need some native code as well, and the much larger number that simply can't run in the stricter sandbox of an applet) but the nature of the compatibility problems with Vista is that these programs WERE NOT designed to limit themselves to safe operations. You'd need to provide those apps a full playground (virtual OS) rather than just a sandbox, and then isolate them from the main OS... which means isolated from the rest of the running software, isolated from the hardware and even from the standard HAL... at this point you might as well run a copy of Windows XP or even ME in Virtual PC. Good luck gaming on that, or using a software firewall (to protect the host system), or any of a long list of other things.

      --
      There's no place I could be, since I've found Serenity...
    20. Re:Security vs backwards compatibility by Cthefuture · · Score: 1

      Uh, OS X is based on NeXTSTEP which has been around since the 80's. On top of that NeXTSTEP itself was based on older stuff like the Mach kernel and a whole bunch of BSD stuff.

      That could be an option for Microsoft too and I don't doubt they already have people researching it. That is, running Windows on top of an already established system like one of the BSD's or whatever (probably not Linux though because of the GPL infection). That probably still wouldn't fix their security holes though because a lot of their problems are not in the kernel but in the user-land stuff.

      There are a huge number of very large API's in Windows that go all the way back to DOS, it must be a nightmare to try to maintain all that. Apple does things differently because they don't have any problems throwing out the old stuff or completely changing something. That has its own problems, like forcing users to upgrade the OS or even the hardware just to run certain software (I hate that and it's why I don't use Apple products unless I'm working a contract that needs it).

      --
      The ratio of people to cake is too big
    21. Re:Security vs backwards compatibility by Jason+Levine · · Score: 1

      It wouldn't be impossible to give private sandboxes to "legacy" apps that don't use the new secure APIs.

      There are already applications that do nearly this. SandboxIE can sandbox any application and prevent it from overwriting anything on your system or in your registry. As far as the sandboxed application is concerned, it is making the file/registry changes (and those changes can persist from session to session). However, the real system is unaffected. If the program you ran turns out to have spyware or a virus, you just halt all executable programs in the sandbox and then dump the contents. No traces of virus/spyware will be left behind.

      If Microsoft really set their mind to it, they could easily recreate SandboxIE (or they could buy it) and integrate it into Windows.

      --
      My sci-fi novel, Ghost Thief, is now available from Amazon.com.
    22. Re:Security vs backwards compatibility by Anonymous Coward · · Score: 0

      Their next iteration is currently in beta testing. I doubt they will do a major refactoring.

    23. Re:Security vs backwards compatibility by shutdown+-p+now · · Score: 1

      The userland APIs are actually also decent, security-wise. The problem is mostly with existing applications, and particularly with that "I can do whatever I want" mentality inherited from Win9x, and condoned on NT for too long by defaulting user to Administrator. This changed with Vista.

  8. Decent free stuff already available by Ritz_Just_Ritz · · Score: 3, Informative

    I've used both Avast and AVG freeware products with good results. Zero infections over the last couple of years.

    As a consumer, it sure would be nice to have the OS actually ship with something that keeps the naughty people out, but there are a number of freely available alternatives already.

    http://www.avast.com/eng/download-avast-home.html
    http://free.avg.com/

    'course, if you use Linux then you can probably safely ignore the threat for now.

    Cheers,

    1. Re:Decent free stuff already available by maxume · · Score: 1

      Have you had any cases of something attempting to install itself?

      I run AVG, but all it has done is quarantine a few files that it didn't like, that were not threats.

      --
      Nerd rage is the funniest rage.
    2. Re:Decent free stuff already available by ozphx · · Score: 1

      I haven't used a virus scanner and have also detected zero infections. Avast & AVG both score the usual 80-90% of new threats, which is why I can't be bothered running them.

      --
      3laws: No freebies, no backsies, GTFO.
    3. Re:Decent free stuff already available by duguk · · Score: 1

      If you can't be bothered with onaccess scanning, try clamwin. Its very good for checking suspicious files.

    4. Re:Decent free stuff already available by Twanfox · · Score: 2, Interesting

      I had enjoyed AVG even though I didn't frequent sites or normally present infectable machines to the Internet. However, with their latest version (v8), I've found this to be the case as well, it quarantines legitimate files. Specifically, a program I used with nLite to create add-in programs for build CD's was flagged as dangerous and to be quarantined. I sent it in and AVG basically told me it was detected properly.

      I've uninstalled AVG and don't plan to look at it for AV protection in the future.

    5. Re:Decent free stuff already available by Anonymous Coward · · Score: 0

      > If you can't be bothered with onaccess scanning, try clamwin. Its very good for checking suspicious files.

      If you do want clamwin, and you also want on-access scanning, then try Moon Secure Antivirus.

      http://www.moonsecure.com/

      "Moon Secure AV is an opensource antivirus currently using the clamav engine ... Unlike clam it has an enterprise level real-time scanner. It is built for windows and runs on XP and vista. It can scan portable drives and fixed drives. It is able to detect viruses, Trojans and spyware."

      Not many people know about that one, it would seem.

    6. Re:Decent free stuff already available by hairyfeet · · Score: 2, Informative

      It sounds like AntiVir is what you want. I let my nephews play their online games on a spare box and the youngest tried to download a "free" online game that was full of adware/malware crap. AntiVir stopped it cold and threw up a nice little shitfit which scared him off installing it. AntiVir also has a really nice,easy to customize interface. Like I don't download email,so I simply didn't have it install the email "shield" at first install. And of course free is always of the good.

      As for the article,it simply won't work. OEMs are getting too much money for time limited crapware AV programs to install this,and MSFT can't install it in the OS because of antitrust. So I bet this will be one of those things that sits quietly on the server being forgotten. Not to mention it fails to address the problem of pirate Windows boxes. Because we all know this will only be available for "genuine" Windows,and yet the biggest source of trojan spambots out there is all the pirated Windows boxes that have never been updated thanks to fears of WGA. So while it is a nice idea in theory,I'm betting it just withers on the vine.

      --
      ACs don't waste your time replying, your posts are never seen by me.
    7. Re:Decent free stuff already available by dubbreak · · Score: 1

      I've used both Avast and AVG freeware products and they have detected zero infections over the last couple of years...

      There. Fixed that for you.

      No infections detected != no infections.

      Doing something as simple as padding malware with 0x00 can foil virus scanners. If I write something today and send it to you and you are foolish enough to run it (say I know you don't show file extensions so I disguise it with a word icon file). Your antivirus won't pick it up as a virus. It's not in their database because they haven't seen it "in the wild" yet.

      --
      "If you are going through hell, keep going." - Winston Churchill
    8. Re:Decent free stuff already available by gad_zuki! · · Score: 1

      >OEMs are getting too much money for time limited crapware AV programs to install this

      If security continues to slip then OEMs lose the entire purchase to Apple. This is already happening. If anything OEMs are demanding this. Why would they stick their necks out for Norton or Mcaffee? Its really not worth it.

      >I let my nephews play their online games on a spare box and the youngest tried to download a "free" online game that was full of adware/malware crap.

      Why did you even let them run as local admin to begin with? Thats the real problem.

    9. Re:Decent free stuff already available by blai · · Score: 1

      "Zero infections over the last couple of years" Maybe you just don't know about it. I use Avast too, but it's never a sure thing whether you're infected or not.

      --
      In soviet Russia, God creates you!
    10. Re:Decent free stuff already available by Anonymous Coward · · Score: 0

      I've found the best solution (at least for my household) was to run a virtual machine of XP just for going online. It runs on top of (*gasp*) XP which is used for games and whatnot. If it needs more resources, all we have to do is shutdown the VM.

      Since all virus and spyware generally come from web browsing, if we were to get infected (and we have once) the only thing affected is the VM which can be easily resetted. I know the average PC user probably cannot set up a virtual machine but it does appear to me to be the best solution without having to run AV/AS software in the background at all times.

    11. Re:Decent free stuff already available by hairyfeet · · Score: 1

      Umm,you do know if that were the case there are plenty of free AV products out there that would be happy to give their product to the OEMs in return for a chance to upsell all those customers,right? There is a REASON why the OEMs install that time limited crap,and that is because they can sell the machines $50 cheaper and still make a profit thanks to the cash they get from the crapware companies. And in a market as cutthroat as Windows OEM sales,every dollar you can slash off the price counts.

      As for why I let my nephews run as admin,let me ask you a question: Have you EVER tried to get those damn MMORPGs to run as a non admin? Have you? trust me,it is like bashing yourself in the head with a brick,only not nearly as productive. If you do manage to get it to go you can be rest assured that the next update,which seems to come almost daily on those things,will break it and you'll be back to square 1. Much easier to simply hand them a spare box that I NEVER use,that they can use for that and surfing Youtube ONLY,and which I have a disc image of so if they ever completely bone it I can have it back up and running in less than 20 minutes.

      I am too busy and life is too short to bash my brains in trying to get those MMORPGs to run as non-admin when I can simply stick an old box running AV in the corner and let them loose. It isn't like there has ever been CC numbers or any passwords or anything worth taking on that box anyway. It is strictly a game box,nothing more.

      --
      ACs don't waste your time replying, your posts are never seen by me.
    12. Re:Decent free stuff already available by Anonymous Coward · · Score: 0

      You've forgotten the newest kid on the block:

      http://www.personalfirewall.comodo.com/index.html

      Comodo have recently integrated their firewall and anti-virus products into an "Internet Security" Suite. Both free for use by anyone. None of those personal / home use only clauses like AVG or Avast)

    13. Re:Decent free stuff already available by Anonymous Coward · · Score: 0

      If your antivirus is failing you, how do you know you're not infected?

    14. Re:Decent free stuff already available by mebrahim · · Score: 1

      Zero infections over the last couple of years.

      How do you know?!

  9. Internet Explorer by Anonymous Coward · · Score: 0

    Didn't microsoft get pegged for something similar with internet explorer?

    1. Re:Internet Explorer by X0563511 · · Score: 1

      You do realize what getting "pegged" means, right?

      --
      For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
    2. Re:Internet Explorer by Killer+Orca · · Score: 1

      You do realize what getting "pegged" means, right?

      I believe my favorite part of the page is the warning at the top saying "This article or section may contain original research...", it's like a big, "Watch out! Perverts wrote this article." banner.

    3. Re:Internet Explorer by Anonymous Coward · · Score: 0

      I did not want to know about that. Really.

    4. Re:Internet Explorer by dword · · Score: 2, Informative

      No, they were pegged because of this: for a while, Internet Explorer was actually part of the operating system. Many parts of windows would simply NOT function if you removed Internet Explorer. The core of IE is also used in many places by MS products, including Windows Help for example. Basically, they bullied their way into the browser market by forcing everyone who had Windows to have IE on their computers. The case has been settled, unfortunately.

    5. Re:Internet Explorer by shutdown+-p+now · · Score: 1

      Many parts of Windows still won't function, and a lot of Windows applications won't, too. Thing is, it turned out that it's very convenient to have a HTML renderer as a reusable component that you know is there on any PC your software is going to be installed. Just ask the KDE guys ;)

  10. The tag says it: fuckno. by Jane+Q.+Public · · Score: 2, Insightful

    Microsoft has long had the strategy that "We don't need to do that... we are creating a rich fertile ground for third-party developers."

    (Which of course brings up: if they create rich fertile soil, what does that make them? But I digress...)

    Then, as Microsoft so famously does, it reverses its strategy and promises to partners, when it becomes convenient for them.

    The free products are probably better anyway. Sorry, Microsoft, but you are reduced to catering only to fools. Admittedly, that is a rather large market.

  11. Won't hurt competition. by guytoronto · · Score: 2, Interesting

    There are already a handful of free options available (AVG, Avast, etc), and they haven't stopped Symantec from raking in the bucks.

    1. Re:Won't hurt competition. by Ethanol-fueled · · Score: 3, Funny

      Don't listen to parent, his "free" options are a sham.

      For example, somebody suggested the Clam AV for Windows and it all it did was turn my screen into a black box with gibberish in it. If it wasn't for my swift hard reset, CLAM AV may have broken my computer!

    2. Re:Won't hurt competition. by rdnetto · · Score: 1

      But how many of them came preinstalled with Windows? Arguably, this is one of the few Microsoft programs that shouldn't be subject to antitrust - *everyone* should have AV since its a security component. I don't recall hearing about any antitrust suits regarding Windows Firewall.

      --
      Most human behaviour can be explained in terms of identity.
    3. Re:Won't hurt competition. by whatUrunning.com · · Score: 0

      It all depends on how MS release it, if it is a stand alone product then it will not hurt the other commercial security companies too much but if it is pushed as a Windows Update or comes pre installed on Windows 7 then it will.

  12. I hate to say it but: by Vandilizer · · Score: 2, Insightful

    I know they are not making their O/S's more secure, but isn't anything they do to reduce malware a good thing. Aren't these other companies only existent because of Microsoft's poor quality in the fist place?

    1) Find a company that make a product with a defect
    2) Make a process for improving the flaw
    3) Sue when they try to fix the flaw
    4) Profit for life?

    1. Re:I hate to say it but: by Anonymous Coward · · Score: 0

      That's just it, they aren't fixing the flaws, their just providing they're own Spackle and ruining the market for other Spackle dealers

  13. Oh Yeah? by Greyfox · · Score: 1

    When will they release well thought out and secure software that doesn't need anti-virus software?

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

    1. Re:Oh Yeah? by Anonymous Coward · · Score: 4, Insightful

      As soon as you provide users who won't click on somefamouspersonnaked.exe. Let's not lie to ourselves and say that if we put the same dumb users in front of say an Ubuntu install that they wouldn't click on somefamouspersonnaked.deb or something. They'd give sudo their password too.

      Bring the users who won't do shit like that, adn then we will all have software that doesn't need anti-virus.

    2. Re:Oh Yeah? by Anonymous Coward · · Score: 0

      When nobody is capable of running it. The most common vector of attack for any Windows box is the user. If you can convince the user to run it then you have taken over a context which gives you fairly wide rights, certainly enough to launch a spambot that can start self-replicating. No OS is immune to this vulnerability, although Windows Vista probably goes the furthest of all OSes to lock it down.

    3. Re:Oh Yeah? by blueg3 · · Score: 1

      While I'm hardly defending the quality of their OS design, a lot of what antivirus software does
      a) can't be fully remedied by good OS design
      b) is made much more powerful by being low-level.

      AV software really needs to be as low-level as possible, to prevent malware from duping it. (Although mostly AV software just catches the common, dumb malware.)

      One of the things you really want to do is determine, "If I run this code / visit this website / open this document, will it perform actions that I am privileged to do, but don't actually intend to happen?"

    4. Re:Oh Yeah? by hairyfeet · · Score: 4, Interesting

      What you speak of is known as The Dancing Bunny problem which as someone who has worked nearly 15 years in PC repair I can say is all too true. I had a buddy working corporate when Melissa hit and he said several PHB middle managers got MAD when he told them they couldn't have their attachment from that Melissa girl. He said he finally had to tell them "Go tell the boss you want to run Melissa and see what HE says". So never underestimate the incredible stupidity a user is capable of when they think there is a dancing bunny waiting for them. You should really read the link on the dancing bunnies. It is SO true!

      --
      ACs don't waste your time replying, your posts are never seen by me.
    5. Re:Oh Yeah? by Anonymous Coward · · Score: 0

      > Let's not lie to ourselves and say that if we put the same dumb users in front of say an Ubuntu install that they wouldn't click on somefamouspersonnaked.deb or something. They'd give sudo their password too.

      Plagiarised from a post on OSNews, here is a description you could give to a newbie Linux user (for a pre-installed Linux machine) on how to achieve system security:

      (1) There are two passwords, and admin password and your normal user login password (except for Ubuntu, where the one password does double duty). If you are asked for the admin password, it is because a change is about to be made to the system. If you didn't actually want anything changed ... don't give the admin password.

      (2) on Linux, there is a one-stop convenient place to install software from. It is called "Add/Remove software" on the main menu. You can "browse" it like a smorgasboard, and use search, there are 20,000+ packages to choose from, and if you stick to it then your system won't get malware. This is the only place where you would normally use the admin password.

      (3) most of the programs that you would normally use are already installed for you. You normally don't have to search the Internet for any extra stuff, anyway most "unusual" extra stuff is readily available from the "Add/Remove programs", and it is all available at no extra cost. BTW it is also all guaranteed to be add free, and not trialware or shareware. Enjoy.

      (4) No, you don't need an anti-virus or anti-malware. Just use only the "Add/Remove programs" to install additional software, and don't give the admin password anywhere else.

      If a newbie user actually takes that to heart and follows it ... it would easily defeat your "somefamouspersonnaked.deb" trojan.

      It also underlines the inherent security shortcomings of Windows:

      (1) lack of an off-by-default execute-permissions bit for each file in the filesystem.

      (2) lack of the requirement to give a local-account password in order to install anything and give it execute permission, and

      (3) lack of a central trusted repository for installable applications.

      Morro free antivirus offerings won't fix these basic shortcomings of Windows design.

    6. Re:Oh Yeah? by Greyfox · · Score: 2, Insightful
      That's true, but when have they thought it out, either? I mean, yeah it's an easy troll but they've always pushed "ease of use" over Security.

      Look, I did OS/2 support back in the day, and there was quite a lot of concern that we'd never be able to convince the user to click "Shut down" prior to turning off his machine "Because you don't have to do that in Windows." Then Microsoft rolls it out and all of a sudden everyone is used to it, pretty much overnight.

      They could have pushed separate administrative accounts early on. They could have chosen to break some ancient programs to fix architectural problems. They could have paused to consider the implications prior to developing Internet Explorer. The end user may not have liked it but what were they going to do? Run OS/2?

      Sure, there are going to always be users who fall for the tricks, but Microsoft doesn't have to make it easy for the bad guys. They spawned an entire goddamn industry revolving around addressing their security problems, and that industry doesn't really do that good a job at it. I don't really expect Microsoft to, either.

      --

      I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

    7. Re:Oh Yeah? by rusl · · Score: 1

      Well, I'm an ubuntu evangelist as much as anyone, but the real reason you don't get the problem is there is no such somefamouspersonnaked.deb. We act smug as much due to our obscurity as we do for better software. There will be one day a somefamouspersonnaked.deb exploit and it will be embarrassing how many of us fall for it. Restricting yourself to what is only in repos isn't much fun or Free as in Freedom of software. However, you're right that it does cut down the chances of malfeasance considerably. I certainly look there first because it's a lot easier. Custom repos are great too but could be exploited. Right now its too obscure that saves us.

      --
      Stupidity is its own reward.
    8. Re:Oh Yeah? by LingNoi · · Score: 1

      Nonsense, you've added the custom repos because you trust the person that maintains them and who has signed their debs. Such examples include winehq.org

      Do you believe a wine deb would have contain malicious code? If it did Scott Ritchie who signs the debs (and works for ubuntu?) would be kicked out of ever contributing to wine and possibly ubuntu, unless it was an accident.

    9. Re:Oh Yeah? by marcosdumay · · Score: 1

      "Let's not lie to ourselves and say that if we put the same dumb users in front of say an Ubuntu install that they wouldn't click on somefamouspersonnaked.deb or something."

      Yeah, they'd click. And KMail would save the file at their homedir for them. Now, if they are that stupid, I really doubt they'll be able to locate that latter, but if they can locate the file, are persistent enough, have unrestricted sudo priviledges, and don't take that time to think about what they are doing, yes, they'll get infected.

      I wouldn't give unrestricted sudo priviledges to such a user, but I can imagine how some would end-up with those priviledges. Now, the bar for Windows is way lower (double-click and go), and, since the capacity of infections to spread decrease exponentialy with the number (proportion) of people were it can spread; taking also diversity into acount, you'll have a situation where almost no virus can be sucessfull.

    10. Re:Oh Yeah? by shutdown+-p+now · · Score: 1

      The end user may not have liked it but what were they going to do? Run OS/2?

      No, run Mac OS (whichever version there was at that day).

      The bigger problem back then was Win9x, anyway. Now that one didn't have any kind of security whatsoever, by design. Their real mistake was the fact that they pushed Win95 onto the home desktops, leaving WinNT for "enterprise". The result is that the legacy of Win9x security model (or rather, lack thereof) still haunts WinXP. Now, Vista, setting its other flaws, both real and perceived, aside, is really a big step in the right direction - at least it forced the software providers into writing their apps in such a way that they don't require admin privileges unless they're really, really needed (and even then, ask first).

    11. Re:Oh Yeah? by rusl · · Score: 1
      What?

      I'm not trying to disparage the use of custom repos, I'm just saying that these are avenues that are open to exploitation at some later date in the future. Right now it's too obscure to worry about because as you point out, there are only a relative few, yes WINE is one that I use. But eventually when all of this becomes more popular and you have newbies cut and pasting code and repo sources into their machine from random websites (I did it when I was learning, I mostly still trust any site geeky enough to sound like they know what they are talking about) then you are bound to get problems eventually. I think the current gpg annoyance that gives you a message about untrusted sources is a good measure at the moment. But that doesn't change the fact that we are essentially relying on security through obscurity. And if we really are aiming for linux world domination (and I am) then at some point we are not going to be able to rely on being obscure. A lot of non-geeks I know have heard of ubuntu (not just from me) nowadays whereas in the not too distant past I really knew nothing about linux at all. As we become a more digital culture the ideas behind free software and linux in general become less trivial and inherently more popular.

      --
      Stupidity is its own reward.
    12. Re:Oh Yeah? by LingNoi · · Score: 1

      But eventually when all of this becomes more popular and you have newbies cut and pasting code and repo sources into their machine from random websites

      However there's some things that even windows users do don't. You can't talk one into going to www.hackzz.ru and downloading lolwtf.exe so what makes you think that Debian based users would act any different?

      With that being said I have one question. If they install "somefamouspersonnaked.deb" what's to stop them from just uninstalling it later?

    13. Re:Oh Yeah? by rusl · · Score: 1

      That's a good point about deb's actually, they are designed to uninstall.

      However, it's not hard to imagine that when people trying to make problems do so they are going to eventually learn to do it well. www.amazonn.net etc. Or some obscure blog somewhere. And what is to say that the deb isn't actually something else just named that? Isn't that the point?

      --
      Stupidity is its own reward.
  14. Department of Redundancy Department by DoctorFury · · Score: 1

    "...making it ideal for low-bandwidth scenarios or less powerful PCs." That can't run the higher iterations of Microsoft anyway. I'm glad they've decided to protect 3.1, I was concerned that someone could hack my ARCHIE search query history.

  15. Er... by soniCron88 · · Score: 1

    "...major rivals will be lawyering up already."

    Interesting mix of tenses.

  16. My thanks by cyrus0 · · Score: 5, Funny

    That reminds me, I need to put duct tape over all the rust on my car. Thing should hold up like a champ!

  17. It will fail.. like the Morro Castle by neonux · · Score: 3, Insightful

    From Wikipedia :

    Built initially in 1589 in response to raids on Havana harbor, el Morro protected the mouth of the harbor with a chain being strung out across the to the fort at La Punta. It first saw action in the 1762 British expedition against Cuba when Lord Albemarle landed in Cojimar and attacked the fort defended by Luis Vicente de Velasco e Isla from its rear. It fell because the English could command the high ground

    --
    @neonux
    1. Re:It will fail.. like the Morro Castle by Pinckney · · Score: 0

      Do you care to explain what the Morro Castle has to do to AV software?

  18. A golden oppourtunity... to fail. by Anonymous Coward · · Score: 0

    Microsoft probably thinks that this is a great way to compete with other, more intrinsically secure operating systems.

    Having basic security provided by a bunch of third-party vendors has never been a good thing for windows. A lot of antivirus suites today are so kludgey that it's hard to tell whether they are working or not. A good antivirus program built into the operating system would give windows some level of parity with other major operating systems. (speaking strictly in terms of functionality, of course.)

    A bad one, on the other hand, could indeed make the whole system more insecure, by driving competitors out of business and giving malware writers one unified target to aim for. Though I don't think things could get much worse than the confused, mess that is the modern antivirus market. This has always been one of the main reasons I run Linux: Paying a monthly fee to keep my operating system unmolested because the programmers couldn't get their act together feels too much like extortion.

  19. More competition in this sector may be good. Or? by Surreal+Puppet · · Score: 4, Informative

    The antivirus market is, as everyone knows, the most FUD-filled part of the security industry. The effectiveness of different antivirus products is largely anecdotal, and shifts rapidly because of the arms race between virus writers and antivirus manufacturers. As it stands now, even "expert" end user cannot ascertain the relative effectiveness of the suites, and because antivirus products are still heuristics-based with a few "depacker" routines built in, they only catch the really obvious fish. (One funny thing with this is, if you pack an executable with a common yet relatively complicated packer, say "redeye", it'l get caught, but if you just jump in and jumble up the instructions with a debugger you can make it "invisible" easily). Because of this reliance on FUD to sell, and because there *is* already fierce competition in the antivirus market, maybe this won't change much, unless MS locks other vendors out somehow. Or will it be a different form of competition, because of the now-asymmetrical playing field? MS has an advantage in that they have access to the code and people who wrote the code, and designed the OS architecture.

  20. Odds are... by Voyager529 · · Score: 5, Insightful
    1. It will probably go the way of Movie Maker, Windows Mail, and a few other apps that are now optional downloads.

    2. It will be a basic virus scanner and will probably not replace NOD32 or another fully featured scanner.

    3. Webroot seems to be doing just fine even though Windows Defender has been around for a few years now. Same for Spybot, Ad-Aware, and any number of other apps.

    4. Compounded with #3, Microsoft Antivirus will be entering a well established field with plenty of household name competitors. Norton and McAffee are well known names that most consumers know and will probably opt for (quality of software notwithstanding).

    5. Many smaller firms (Kaspersky comes to mind) have consumers as their small-fry and make their big bucks off volume licenses. It appears that Morro isn't competing here.

    6. Whether accurate or not, perception or reality, many people consider Microsoft Security Solutions to be an oxymoron. So long as it can be uninstalled, people will be free to add their own antivirus software (see point #4).

    Joey

    1. Re:Odds are... by Anonymous Coward · · Score: 0

      Also, MS already has a built-in firewall with the later XP service packs and Vista. That hasn't stopped anyone from selling firewall software, especially at a corporate level.

    2. Re:Odds are... by RATLSNAKE · · Score: 1

      Although I agree with some of your points, are you aware that over the last 18+ months MS "poached" some of the best malware researchers from all the major AV companies? I previously worked in the AV business for 4 years for one of the so called "established leaders" and knowing some of the people that MS now has under their wing, I'd happily use their product. (And yes I never thought I'd ever say that!) They've got some real clever people working there. Now how much input they are allowed to make I don't know, but as industry veterans if MS listens to them, they could do well market wise.

    3. Re:Odds are... by trawg · · Score: 1

      4. Compounded with #3, Microsoft Antivirus will be entering a well established field with plenty of household name competitors. Norton and McAffee are well known names that most consumers know and will probably opt for (quality of software notwithstanding).

      Heh, like when they introduced Internet Explorer into a world that was used to using Netscape Navigator?!

    4. Re:Odds are... by dword · · Score: 1

      I like your style...
      4. (see #3)
      6. (see #4)
      Lemme guess, you're one of those assembly or BASIC programmer who enjoys his jmp/goto commands?

      I just love how easy it is to spot computer programmers when they're trying to make their point.

    5. Re:Odds are... by Voyager529 · · Score: 1
      1. OEMs are in bed with antivirus manufacturers, too. This is why we have bundleware. My HP laptop came with a 60-day demo of Norton Internet Security, and HP got paid to put it there (and would probably get a commission if I bought a year subscription from the demo). Microsoft will have to fight at that level, which would piss off the OEMs as well as giving some lawyers a new courtroom circus. This would probably be even more evident in the EU where Microsoft is under even tighter regulation than in the US (Windows ships without Media Player in Europe for this reason).

      2. Windows Live Onecare has sat on the shelves right next to Norton, McAffee, and Trend Micro for a few years now, includes even more features, but still has nowhere near the market share of the other companies. Odds are Symantec won't file for chapter 11 if MS starts bundling a minimalist antivirus. Roxio and Nero aren't going broke because Windows XP and Vista are able to burn CDs natively, either.

      3. Internet Explorer was the first browser people had ever used in many cases (including my own). Netscape was a bit different than this case, because while Netscape was popular, in alot of cases the people that used IE at the exclusion of Netscape hadn't yet used a browser at all. The World Wide Web was still in its infancy then. I'd venture to say that most people have used an antivirus and know what one is, even if they don't update it or run regular scans, because they have been around for over two decades.

      Joey

    6. Re:Odds are... by Corporate+Troll · · Score: 1

      Windows ships without Media Player in Europe for this reason

      That's not true. All machines here ship with Media Player. The ruling said that there must be a version without Media Player, but didn't prohibit the sale of the Windows version with Media Player nor does it cost less money. For all intents and purposed, the Edition N is nonexistent.

  21. because most anti-virus is useless and expensive by fermion · · Score: 2, Interesting
    In this case, the reason most anti-virus software will leave is that anti-virus software seems to be very difficult to write and maintain. Most of the software cause unwanted side effects, various interruptions to productivity, and other negative factors. Since anti-virus software uniformly sucks, one might as well use the free sucky software from MS.

    That is if it works. Windows defender, in my experience, does not work nearly well enough. I have it on my MS Windows computers because it is installed by default by MS. I still run spybot to actually protect the machine. My fear is that MS is not going to that good of a job, but people are going to feel that the MS protection is enough, and not lay in that second line of defense. Maybe the company that built all the security holes is the best to build the defense against them. Maybe not.

    --
    "She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
  22. Morro? by Anonymous Coward · · Score: 0

    More like, Morr-o'the same!

  23. free is a bit misleading... by Anonymous Coward · · Score: 0

    When they couldn't manage to actually sell their own antivirus software.

    Buying branded software from them is like having sex with the local crack hore. Sure, it works but there's an STD in there somewhere.

  24. Presumably for windows 7 by duguk · · Score: 2, Interesting

    Presumably this will only be for Windows 7 as it is to be released around that time too.

  25. Shouldn't be 'bundled' by Anonymous Coward · · Score: 0

    It shouldn't be installed by default, but rather as an optional install from windows update or something.

  26. now free: kludge fix by Anonymous Coward · · Score: 0

    So let me get this straight MS is now offering "free" add-on that kludge-fixes a long standing basic flaw with Windows.

    If this becomes flame bait then things are really that bad.

  27. Makes sense by Chairboy · · Score: 1, Offtopic

    Who do you trust? People who come in from all over the place with their "security experience" who build antivirus software that can protect against exploitation of all the security holes in Microsoft products, or the people who develop the Microsoft products that have those holes in them?

    I say stay with the people who know the holes best, and who knows a child better than its parent? Microsoft!

    1. Re:Makes sense by 99BottlesOfBeerInMyF · · Score: 1

      Who do you trust? People who come in from all over the place with their "security experience" who build antivirus software that can protect against exploitation of all the security holes in Microsoft products, or the people who develop the Microsoft products that have those holes in them?

      More like, who do you trust, the people who only get paid when you're happier with them than their competitors or the people you have to pay regardless of the quality of their product because they're a monopolist and not subject to the normal pressures of a capitalist free market? It's about motivation. I trust the greedy guys who have to keep me happy to make money over the greedy guys I have to pay no matter what.

  28. They're embracing... by Anonymous Coward · · Score: 0

    ...Linux!!!

  29. Only by arazor · · Score: 1, Insightful

    It's only a bad thing if the software does not work. I want MS to fail as to do most of us but they seeing as they contract out that anti malware software the anti virus software will probably be at least semi-decent.

  30. Souldn't be needed, but... by corsec67 · · Score: 2, Insightful

    Anti-virus really shouldn't be needed (Obligatory XKCD), but if they are going to offer the updates for free as well, that could be a good thing.

    It could also be a very bad thing, since it would lead to a near monoculture of OS+antivirus, so you only have to crack one platform and the associated antivirus to write a virus, and don't really have to worry about other antivirus software products.

    Antivirus is "enumerate the bad" which generally doesn't work well, instead of having a whitelist of acceptable software.

    --
    If I have nothing to hide, don't search me
  31. Is it a vacuum cleaner? by RiffRafff · · Score: 1, Funny

    No? Then it's gonna suck.

    --
    "I might have made a tactical error in not going to a physician for 20 years." -- Warren Zevon
  32. Hilarity ensues by symbolset · · Score: 4, Funny

    The opportunities for humor start here and go on forever. I guess we might as well start:

    "My God! Its full of fails!" "Like buying antibiotics from the hooker." "TrunkMonkey equipped with chair." "Would you like Warez with that?" "Antivirus vendors: Oooh. That's what 'gold partner' means!" "Hi, I'm a Mac ... and I'm a PC (achoo)." Good Lord this stuff writes itself. Hold on while I microwave some popcorn.

    --
    Help stamp out iliturcy.
    1. Re:Hilarity ensues by sootman · · Score: 1

      "Morro" will be available as a stand-alone download and offer malware protection for the Windows XP, Windows Vista and Windows 7 operating systems.

      You had me at "XP". :-)

      --
      Dear Slashdot: next time you want to mess with the site, add a rich-text editor for comments.
    2. Re:Hilarity ensues by Anonymous Coward · · Score: 0

      With apologies to Little Orphan Annie:

      The patch'll come out
      To Morro
      Bet your bottom dollar
      That to Morro
      There'll be one!

      Just thinkin' about
      To Morro
      Adds a lot of glitches,
      And the sorrow
      'Til there's some!

      When I'm stuck with a day
      That's gray,
      And lonely,
      I just stick out my chin
      And Shrug,
      And Say,
      Meh!

      The patch'll come out
      To Morrow
      So ya gotta hang on
      'Til to Morro
      Come what may
      To Morro! To Morrow!
      I dread ya To Morrow!
      You're always
      A day
      A way!

    3. Re:Hilarity ensues by Technomage5000 · · Score: 1

      No longer Anonymous Coward... With apologies to Little Orphan Annie: The patch'll come out To Morro Bet your bottom hard drive That to Morro There'll be one! Just thinkin' about To Morro Adds a lot of glitches, And the sorrow 'Til there's some! When I'm stuck with a day That's gray, And lonely, I just stick out my chin And Shrug, And Say, Meh! The patch'll come out To Morrow So ya gotta hang on 'Til to Morro Come what may To Morro! To Morro! I dread ya to Morro! You're always Way too late!

  33. Wait... what? by Anonymous Coward · · Score: 0

    So let me get this straight. Microsoft is essentially patching vulnerabilities in their software, thus removing a niche that has been cosily occupied by various antivirus application providers since square one.

    Where's the conflict of interest? AV companies made the business decision to place themselves in a position entirely dependant on another company's mistakes. Latter company fixes said mistakes, niche disappears, former companies are shit out of luck. It was their poor business decision in the first place. Tough cookies.

    1. Re:Wait... what? by LingNoi · · Score: 1

      Exactly, if you set yourself up to be Microsoft's bitch then you should expect to get fucked.

  34. I think this will improve AV quality by gweihir · · Score: 1

    There is already free AV software, yet the commercial vendors are still in business. In fact, the quality of commercial offerings seems to be dropping to a really low level recently, so the free stuff cannot be much of a threat. Knowing Microsoft, their free stuff will also not perform well (even their paid for stuff is mediocre at besst and that across the board) but many people will be usiong it as default. I think this ia actually a good thing and it will force AV vendors to clean up their act and offer good protection and usability once more in order to be significantly better than the MS offerting. About time.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
    1. Re:I think this will improve AV quality by Corporate+Troll · · Score: 1

      There is already free AV software, yet the commercial vendors are still in business.

      This has probably more to do with the fact that those free (as in beer) versions come with a license that disallows commercial usage. This is like back in the olden McAfee days. Their virus scanner (on DOS) was free for non-commercial use. Want to use it in a company? Pay up!

      When virus scanners became payable for the end-user, I was apalled.

    2. Re:I think this will improve AV quality by BronsCon · · Score: 1

      They only have to be marginally better than Microsoft AV. I'd say, no AV can pull that off easily.

      --
      APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  35. Good Grief by MightyMartian · · Score: 1

    This is a clear anti-trust violation. Whatever the explanation for this move, the fact is that for the better part of two decades an industry has been built out of the security flaws in Microsoft operating systems, and now, as if a replay of the whole Internet Explorer-Netscape debacle, Microsoft is giving away a product where competition with for-pay products currently have a share.

    But the economic woes that will preoccupy most governments will let them get away with this, where in fact Microsoft should be threatened with fines so massive that Steve Ballmer might even put down that chair.

    --
    The world's burning. Moped Jesus spotted on I50. Details at 11.
    1. Re:Good Grief by rdnetto · · Score: 1

      What makes you so certain its an antitrust? People expect their OS to be secure out of the box, and I'm pretty sure that AV falls under that category. There weren't any lawsuits about Windows Firewall, so I reckon that AV should be safe on similar grounds.

      --
      Most human behaviour can be explained in terms of identity.
  36. Free Antivirus From The Leaders In Virus Infection by Anonymous Coward · · Score: 0

    OOH me me me!! I want my copy!!!! Not no but HELL FUCKING NO.

  37. Trust issues by Krakadoom · · Score: 2, Interesting

    There are two issues here. Will it really change business for the companies who already give away their home use software for free - ie. the ones who make their money on business solutions? I doubt most businesses would be content with whatever MS offers up. Second, will people trust MS, a company who makes wildly insecure software, to provide anti-virus software??

    1. Re:Trust issues by Corporate+Troll · · Score: 1

      I doubt most businesses would be content with whatever MS offers up.

      Why not? You rarely see firewalls like Zonealarm or Blackice on corporate computers. Actually, I've never seen any. The Windows internal Firewall is usually on, though.

      Also, consider this is Microsoft. They could integrate this with WSUS, and centralise the virus updates. (I am aware that several AV vendors provide such tools for their software.) I bet system administrators would be all over it.

    2. Re:Trust issues by Krakadoom · · Score: 1

      Well every serious business I've worked with have had dedicated hardware systems for it - not relying on individual client computers to be correctly configured (which they won't be because employees tend to want to install their own little things here and there, adding up to a huge security mess if filtering is not done centrally). Either way people always balk at "free" and assume it's of lesser quality than something they have to pay for. Sometimes you can't give away perfectly good hardware, but if you charge a minimal amount it'll go quickly.

    3. Re:Trust issues by Corporate+Troll · · Score: 1

      I even rely at home on dedicated hardware. Most places I worked for have indeed dedicated hardware, but the internal firewall is still turned on.

      because employees tend to want to install their own little things here and there

      As an Administrator, you now already have a problem. This should be a big no-no....

  38. Netscape Part Deux by HockeyPuck · · Score: 1, Offtopic

    In the beginning there was windows and Netscape.
    Then MSFT decided to include their own browser, and most users didn't think they needed _another_ browser, so they stuck with IE.
    Eventually, Netscape ceased to exist.
    IE stagnated for years and this led us to Firefox.
    Most users still use IE (70%) http://en.wikipedia.org/wiki/Image:Usage_share_of_web_browsers.png

    Will McAfee go down the same roads at Netscape? Will the average user go out and buy McAfee when Microsoft's might just be "good enough"?

    1. Re:Netscape Part Deux by Earthpaladin · · Score: 1

      Perhaps those other security companies will focus on their other products. For example, once this get's implemented they could redirect those resources for other purposes.

    2. Re:Netscape Part Deux by Anonymous Coward · · Score: 0

      Will McAfee go down the same roads at Netscape?

      One can only hope...

    3. Re:Netscape Part Deux by stoanhart · · Score: 2, Insightful

      Well, if MS doesn't include their AV software with the OS, the situation will be different. Users will still have to pick a product, and not just use the default one.

      Also, I can't really feel to sorry for the AV providers. For years, people have been clamoring for Microsoft to improve security. They tried some fundamental architecture changes with Vista, knowing it would break backwards compatibility. That's what everyone wanted, right? Well, turns out it was a huge PR shit-storm. Now they are creating some free AV software; as long as it's not included with the OS, I hope all lawsuits against it fail. If we are going to start suing companies for providing good, free software, then I personally am starting a lawsuit against the Mozilla corporation. If you build a business plan on repairing another company's inadequacies, you're going to have to deal with the reality that that company might fix those problems itself.

    4. Re:Netscape Part Deux by atraintocry · · Score: 1

      Cruel though it may be, I doubt many of us will be crying if McAfee disappears.

      That said, I feel this might a little bit different from the Netscape story. Consider that the antivirus companies will have to convince regulators that their product is not a necessary part of Windows, despite telling the public over and over again that it is.

  39. anti-MS already? by CannonballHead · · Score: 3, Informative

    It's free. If ANY other company (Apple, HP, anyone) decided they were going to release free antivirus software, anti-malware, blah blah blah, it'd probably be a good thing. MS does it and it can't be good, they're just fixing their own software, it is their own fault to begin with, etc. One would think we'd have gotten at least more creative at blasting MS.

    On a more constructive note, it doesn't matter if MS ships it free with Windows. IE ships free with Windows, Safari ships free with Mac, Konqueror ships free, etc. The user that doesn't know any better to begin with is not going to go out and look for the best (out of 25) anti-virus and anti-malware solution possible. The user that doesn't know any better will use what Windows comes with. So what's wrong with MS providing free software with it's own product? Nobody seems to gripe about Konqueror being default in KDE, even though I presonally dislike it as a web browser.

    Now, if they do other shady things like make it hard to uninstall, or whatever, that's different. But "free anti-virus software" and "shipped with Windows" in the same sentence doesn't mean we should get out a Gates-shaped guillotine.

    1. Re:anti-MS already? by codename.matrix · · Score: 1

      Exactly. As long as Microsoft makes it easy to uninstall and switch to other tools and for OEMs to install an alternative there is no problem.

    2. Re:anti-MS already? by 99BottlesOfBeerInMyF · · Score: 2, Informative

      On a more constructive note, it doesn't matter if MS ships it free with Windows. IE ships free with Windows, Safari ships free with Mac, Konqueror ships free, etc.

      You understand jack and shit about how monopolies are abused and why that abuse is illegal. Bundling products is not illegal. Bundling a monopolized product with a product from a different market is illegal. It's like shooting pistols. It isn't illegal to shoot a pistol. It is illegal to shoot a pistol into a person's head and murder them. It's like trying to defend Seung-Hui Cho murdering 32 people on the campus of Virginia Tech by saying all he did was pull the trigger on a gun, just like Alexander Melentiev in the 1980 olympics. One is clearly a crime and one is not, despite them both being the same act in very different circumstances. It sure wouldn't fly in court and it doesn't logically follow as a coherent argument.

      So what's wrong with MS providing free software with it's own product? Nobody seems to gripe about Konqueror being default in KDE, even though I presonally dislike it as a web browser.

      MS bundling free software undermines the capitalist free market and is illegal antitrust abuse. Konquerer being bundled with KDE undermines nothing and is perfectly legal. Just because you haven't bothered to learn what antitrust abuse is or understand the economics behind it doesn't mean you have a point anymore than someone who can't understand why murder is illegal when competition pistol shooting is not, has a point.

    3. Re:anti-MS already? by Conor+Turton · · Score: 0

      You understand jack and shit about how monopolies are abused and why that abuse is illegal. Bundling products is not illegal. Bundling a monopolized product with a product from a different market is illegal.

      But it's not a different market, is it? Microsoft are a software company. Antivirus products are software. It's a different sector of the same market.

      --
      Conor "You're not married,you haven't got a girlfriend and you've never seen Star Trek? Good Lord!" - Patrick Stewart
    4. Re:anti-MS already? by Richard_at_work · · Score: 1

      You misunderstand the situation yourself - bundling free software is not illegal, no matter who does it. Its the manner in which it is bundled, and even then the legality would have to be decided by a court, it is most certainly not a clear cut issue.

    5. Re:anti-MS already? by CannonballHead · · Score: 1

      How is I misunderstood? It's not a different market. Oh, sorry, I didn't realize that when you buy a Mac, you only get an "operating system." As though an "operating system" is some theoretically stripped down software that does only one thing - interact with hardware. Operating systems don't include anything from what yo ucall a "different market" ... like a text editor. Or a web browser. Or a telnet application. Or ...

      As for flying in court, I would love to see you try to accuse MS of being a monopoly because it is bundling software from a different market. What in the world is a "market?" Who defines the crossover between these never before mentioned software "markets?"

      MS bundling free software undermines what? How in the world is bundling free antivirus software (given, of course, my aforementioned pre-conditions, such as: you are not forced to use it) undermining anything?

    6. Re:anti-MS already? by 99BottlesOfBeerInMyF · · Score: 1

      But it's not a different market, is it? Microsoft are a software company. Antivirus products are software. It's a different sector of the same market.

      Unless you can buy an antivirus suite to run your computer instead of an OS, they are not direct competitors and are separate markets from both a legal and economics perspective.

    7. Re:anti-MS already? by 99BottlesOfBeerInMyF · · Score: 1

      You misunderstand the situation yourself - bundling free software is not illegal, no matter who does it. Its the manner in which it is bundled, and even then the legality would have to be decided by a court, it is most certainly not a clear cut issue.

      Read the Sherman antitrust act and the accompanying guidelines. It is pretty clear. It is illegal to tie a market that is monopolized with a market which is not. The first example of tying, is bundling products, where one is in a monopolized market and another is in a separate, pre-existing market. I can understand it. You can understand it. You better believe MS's army of lawyers understands it. The only questionable part are market definitions... which were already defined with regard to MS's OS in previous court cases.

    8. Re:anti-MS already? by shutdown+-p+now · · Score: 1

      Bundling is not illegal in and of itself, even by a monopolist. It's only illegal when it clearly has an intentional adverse effect on the competitors. Which was the problem with MS bundling IE.

      Though, frankly speaking, IE killing NN wasn't so much due to bundling as it was due to the fact that NN4 just plainly sucked compared to IE5+, both in terms of standards support (CSS etc), usability, and speed. I don't really feel sorry for Netscape there; besides, if they hadn't been put in the position that they were, there probably wouldn't be Firefox today as we know it, or at least it wouldn't be anywhere near as mature.

    9. Re:anti-MS already? by 99BottlesOfBeerInMyF · · Score: 1

      How is I misunderstood? It's not a different market.

      I thought my explanation was fairly clear. I'm assuming English is not your first language?

      Oh, sorry, I didn't realize that when you buy a Mac, you only get an "operating system."

      No, when you buy a Mac you get a complete computer system including hardware, OS, some applications, and support service. The same as if you buy a Dell or an HP system. That's why the computer system market is not monopolized. The desktop operating system is monopolized by Windows. Apple bypasses that monopoly by making their own OS, but does not sell into the desktop OS market (to Dell and HP etc.) and so is not a direct competitor in that market. This is Econ 101 stuff. I suggest you pick up a used college textbook on economics and read it through. It will be worth your while.

      As for flying in court, I would love to see you try to accuse MS of being a monopoly because it is bundling software from a different market.

      You're obviously confused. Having a monopoly is not illegal. Bundling products does not make you a monopoly or not make you a monopoly. If you do have a monopoly (it is already decided by the courts that they do) then bundling a product from a separate market with the product from the monopolized product is the most common form of illegal tying, which is antitrust abuse. Antitrust abuse is illegal, not having a monopoly. MS has a monopoly and has been convicted numerous times of antitrust abuse including bundling (as well as other forms of tying, price fixing, and other abuses).

      What in the world is a "market?" Who defines the crossover between these never before mentioned software "markets?"

      Here's where that econ textbook would come in handy. A market is all the interchangeable offerings considered by purchasers. For example, when Dell decides to buy video cards to put in their new desktop, all the different cards they can buy constitute the market. The same goes when Dell decides to purchase an OS to include in their computers.

      From a legal perspective, the courts determine what does and does not constitute the boundaries of the market. For example, the EU has been debating if Apple's iPod has monopoly influence and the primary point of contention is defining the market. It comes down to if average consumers consider cell phones as alternatives to iPods for playing music. Given the current trend towards consolidation, they seem likely to rule that cell phones are valid competitors and Apple does not have monopoly influence.

      In the case of MS, the market has already been defined by various courts in previous MS antitrust trials, so there is no question. The EU defined the market as "desktop operating systems" which includes any OS's OEMs building computers can buy to include in their computer systems. This includes Linux but not OS X. The US court's market definition was more convoluted, but also did not include OS X. As for antivirus programs, can Dell buy one to run applications on instead of Windows or Linux? No. Do people buy antivirus programs now? Yes. Thus, they constitute a separate, preexisting market.

      MS bundling free software undermines what? How in the world is bundling free antivirus software (given, of course, my aforementioned pre-conditions, such as: you are not forced to use it) undermining anything?

      Okay, imagine you make and sell antivirus software. You have to pay your developers, which you do with money from your sales. MS decides to take over your market so they create a competitor. They bundle it with Windows (which everyone already has to buy because they're a monopoly). They raise the price of Windows to pay their developers working on it. You go out of business. It doesn't matter if your product is better because people already have to buy MS's product. Sure they can buy MS's and not use it and pay you, but then they've paid twice. This is basi

    10. Re:anti-MS already? by 99BottlesOfBeerInMyF · · Score: 1

      Bundling is not illegal in and of itself, even by a monopolist. It's only illegal when it clearly has an intentional adverse effect on the competitors.

      Bundling is an example of tying, which is a form of antitrust abuse. To be illegal it must be bundling a monopolized product with a product from another, preexisting market. Antivirus clearly falls into this category and is blatantly illegal, much more so than was the case with Netscape (where the product was free).

      Though, frankly speaking, IE killing NN wasn't so much due to bundling as it was due to the fact that NN4 just plainly sucked compared to IE5+...

      I'm not going to get into a long debate about this, but you should read the court case. MS did a lot to make NN suck in comparison, including illegally creating and using secret APIs and crippling the performance of public ones. That's not to say IE would not have won in a free market, just that the free market was undermined and never given the opportunity to decide. Speculation at this point is fairly pointless.

    11. Re:anti-MS already? by shutdown+-p+now · · Score: 1

      I'm not going to get into a long debate about this, but you should read the court case. MS did a lot to make NN suck in comparison, including illegally creating and using secret APIs and crippling the performance of public ones.

      The real problem with Netscape performance wasn't APIs, it was the fact that their self-made GUI layer was crappy. Also, IE5 simply supported much more of CSS2 and other W3C standards than NN4 did, and no "crippled APIs" would account for that.

      Myself, I wasn't a big fan of either as a user - was using Opera all the way, and a bit of Chrome recently. But as a web developer, I did appreciate IE5 over NN as a development target back in the day.

  40. Not such a shame... by basicio · · Score: 2, Informative

    Driving out the big players in the commercial antivirus market will do consumers a world of good. If you've had to use a computer infected with Norton or Symantec antivirus anytime in the past few years you'll know what I mean.

  41. Pleading guilty? by Doldonius · · Score: 1

    Did I read this right? Finally, they've confessed in public that they cannot, just cannot make an OS even remotely secure by design?

    Whoa.

    1. Re:Pleading guilty? by atraintocry · · Score: 1

      You're forgetting about the "dumb user" security risk.

    2. Re:Pleading guilty? by Doldonius · · Score: 1

      Never. But that's a totally different problem.

  42. No need to call it an "AV program" by imneverwrong · · Score: 2, Insightful

    Make it a feature of the OS that it will flag trojans and malware. Nothing to install or configure, it just does it. Virus signature updates just get installed transparently via Windows Updates. Savvy users can opt-out, just like they can with UAC and Windows Firewall. If anyone does need "extra-strength protection", they can go ahead and install whatever they like.

    As to the wider issue of anti-trust; you can't complain that the OS is insecure, and then complain that steps MS takes to secure it are an abuse of their monopoly power.

    This might even work well enough that botnets will dwindle as systems become more secure. The only people who might lose, are AV companies. Tough. You're not *entitled* to the AV market. And I've seen enough pushy sales tactics and ineffective programs *cough*Nortons*cough* to have little sympathy.

  43. Well it's about time! by HoppyChris · · Score: 1

    It's been ages since the signatures were updated in MSAV. I was sort of hoping they'd just increment the version number on MSAV and see how many people actually remembered the old gem from DOS 6.2.

    1. Re:Well it's about time! by Reapman · · Score: 1

      Those were the days... I remember getting a long distance number to update the anti virus definitions :p granted when it could fit on a floppy downloading at 9600 wasn't so bad...

      Figured MS would never go down this road again with all the anti trust stuff. I'd rather see them work with the companies to improve the performance, then making their own. Or if MS has ideas how to do it better they could always open source it, ala Chrome.

  44. It's a trap! by russlar · · Score: 3, Insightful

    MS releasing free A/V software... again? Wasn't Windows Defender "anti-virus" software?

    And what to you do when someone finds and exploits a security hole in what many users will use as their sole means of computer protection?

    I've got a bad feeling about this...

    --
    Anybody want my mod points?
    1. Re:It's a trap! by cbhacking · · Score: 1

      Wasn't Windows Defender "anti-virus" software?

      Nope, never, not at all. Where in the world did you get an idea like that? Windows Defender is anti-spyware/anti-adware. It looks for programs trying to change your browser's home page, or install toolbars. It checks for programs known to log keystrokes or web sites you visit. It has lists of bad programs, add-ons, and so forth.

      Anti-virus may do some of the same kinds of things (search for malicious trojan executables) but its main target is (strangely enough) computer *viruses* which are programs that compromise, imitate, or replace legitimate software. To do this, AV software needs to scan inside executables and libraries, looking for malicious behavior.

      Granted, there are a few things that are similar about them, and Defender can help you catch some kinds of software classically described as viruses (usually by detecting applications that try to run at startup and asking if you trust them) but it is not and has never claimed to be anti-virus software anymore than Spybot: Search and Destroy or AdAware.

      --
      There's no place I could be, since I've found Serenity...
    2. Re:It's a trap! by marcosdumay · · Score: 1

      That's yet more homogeinity on Windows. That can only be bad, except if you look from the point of view that it will make people go to other plataforms (no, I don't think that will be enough to make a net positive).

      I've said previously, but it is on topic again. MS has no choice, they must do something with their anti-virus, and can't really sell it. If some governemnt make them stop distributing, they win, but they can't really decide that alone.

  45. Why now? by flappinbooger · · Score: 2, Interesting

    It's obvious why they are offering / integrating an AV product.

    But it's been how many years now that they've really had the reputation for ... requiring an antivirus? since windows 3.1? Windows 95?

    Why are they doing this now? Did they just now get the guts to roll out an AV since the whole integrated IE issue? What was the trigger point, really? How long have they been working on it? Are they giving up on the likes of AVG, Avast, Norton and McAfee? (I know I gave up on the latter 2 back in 2000, 2001, personally)

    Is it because they think they can do it better? Are they realizing that Norton and McAfee are CRIPPLING their operating system, giving them an even worse reputation?

    I guess it ISN'T so obvious why.

    Like many slashdotters, I'm "The Guy" people come to and ask questions like "Which Antivirus should I use? Why is my cupholder broken? Can you help me dust off my 386 and put it on the interwebs? Why is XP slow when I have 64 megs of ram on my celeron 233?" I need to know why MS is doing this and if it is any good.

    --
    Flappinbooger isn't my real name
  46. A BIND for anti-virus? by cwolfsheep · · Score: 1

    Probably the most common DNS server out there is BIND, which runs on most computing platforms, and is available for free. If the anti-virus and OS vendors collaborated on something similar to that, then we could have a universal anti-virus that's at least partially open-source and highly-effective.

    --

    Life is irony, and nothing ever goes as planned.
    1. Re:A BIND for anti-virus? by Anonymous Coward · · Score: 0

      Could they make it as user-friendly?

      Pretty please?

    2. Re:A BIND for anti-virus? by Anpheus · · Score: 1

      BIND is user friendly?

      Your definition of user, I think, differs from mine.

    3. Re:A BIND for anti-virus? by LingNoi · · Score: 1

      It's called clam av.

  47. All Non-MS-Approved software dubbed trojan by syousef · · Score: 1

    I use to use Norton, but have stopped since it keeps flagging tools I know aren't infected as virulent. Giving MS the power to decide what can and can't run on your machine in this way sounds like bad news to me.

    --
    These posts express my own personal views, not those of my employer
    1. Re:All Non-MS-Approved software dubbed trojan by freedom_india · · Score: 1

      Switch to AVG or kaspersky.
      AVG slows down your computer more than kaspersky and can detect more virus, but kaspersky is more proactive and can flag down non-anti-virus easier.
      And get the paid version. Support in kaspersky is phenomenal.

      --
      "Doing what i can, with what i have." ~ Burt Gummer
  48. Alternatively... by kevind23 · · Score: 1

    Or they could, y'know, fix the damned exploits in the first place.

    1. Re:Alternatively... by shentino · · Score: 1

      Why?

      They finally figured out step 2

      1. Release crappy OS with security holes up the wazoo
      2. *Release antivirus to patch said holes*
      3. Profit!

    2. Re:Alternatively... by kevind23 · · Score: 1

      That's what I thought too, but it's free.

    3. Re:Alternatively... by Datamonstar · · Score: 2, Insightful

      Woah oh oh... Nothing. Is free. At all. Ever. If this moves even a tiny % of people away from buying a mac or installing Linux then MS has made their profit.

      --
      The eternal struggle of good vs. evil begins within one's self.
    4. Re:Alternatively... by kevind23 · · Score: 1

      I can't imagine how this would move anyone from Mac or Linux. They would gain so many more customers if they could proclaim it virus-free from the get-go.

  49. Great. Even more ubiquitous system sapping CRUFT. by adageable · · Score: 1

    How long has it been since you've had your well-patched system infected by something self-propagating (read: something you didn't run that you shouldn't have)?

    Has anyone actually looked at what most anti-virus software does? If you look in a directory using Windows Explorer... yup, that's right, you scan every file in the directory. If there are zip files in that directory, yup, they are unzipped. If you have JAR's or WAR's... the same thing.

    Don't even think about moving quickly today, you probably spend over half of your computing power on virus scanning the same stupid dll's... over and over.

    Anti-virus software is a complete SCAM.


    Do yourself a favor if you use anti-virus... download filemon from sysinternals, and run it constantly for a day. See how much your own virus scan slows you down. Your computer is NOT slow... your virus scan is.

    Here's another one that just about killed me with McAfee... I was trying to find out why delete operations were taking so long when I was performing large clean, build, and deploy tasks in Eclipse... it takes your system certainly less than a second to delete an 80 MB WAR file in Java... however, with McAfee enabled under default scanning on-access rules, it takes me about 15 seconds to delete that file. Because it must first be scanned as a virus.

    Who writes this stuff? Virus scan is for people how only use computers for reading email (and downloading the latest virus / Jessica Simpson porn) or your parents.

    If you feel differently about your virus scan product, run filemon.exe for a day. You'll realize that (1) your system is bound by disk IO, not CPU and (2) your system isn't slow, your virus scan product is.

    Bah!

    Keep your Windows Update (or Mac-based Software Update) actually up to date, and you've got precious little to worry about.

  50. Finally! by Viree · · Score: 1

    I want to thank the author for this great news! Boy, I can't even begin to tell you how excited this is going to be! I switched to Linux many years ago since there weren't any decent anti-virus program out there. I am now going to make the switch back to Windows. Finally! Yee haa!

  51. Typo by Viree · · Score: 1

    "...Microsoft have announced free anti-virus software for consumers, dubbed Morro, available ..."

    You misspelled moron...oh wait!

  52. More malware? by Anonymous Coward · · Score: 0

    Vista's enough crapware from MS for me. I don't need them to make more...

    (JK!)

  53. If it is anything like their firewall... by TavisJohn · · Score: 1

    Than software will be able to tell the Anti-Virus "I am not a virus" without the hassle of asking the computer owner what to do...

    Just like how software can tell the Windows Firewall to just let them online. It kind of eliminates the whole reason for a firewall!

  54. Cause the others to step up their game? by DJRumpy · · Score: 1

    I'm guessing that the product will be mediocre at best, but it will at least offer minimal protection to those that wouldn't otherwise purchase it. I think in the end it will be a good thing. Those products that are both fee and pay to play will either stand on their own, or fade into the woodwork as a result. It may even give them a bit of competition. I could see an MS product at least running properly on a windows system so it isn't so cpu intensive perhaps?

  55. Buy a company to give it away by gsgriffin · · Score: 1

    If you're going to do this right, buy a company like AVG and then give away the software. Don't just stick it to them all. You've got the money, MS, do what other companies often do. Buy a company that already does a pretty good job...don't just put them out of business.

    --
    jsut athnoer menagiensls ltitle psrhae for you to dcoede. Why do we wtsae our tmie dnoig tihs?
  56. Really? by SlashdoterRocks · · Score: 1

    free tinysoft Anti-virus?? you mean windows security patches? yeah, that works, sometimes.

  57. Free framework, paid malware subscriptions by Anonymous Coward · · Score: 0

    Perhaps an improvement would be to provide a free malware removal framework and allow antimalware companies to provide subscriptions to malware signatures. The framework would need to provide all the current detection and removal methods of current products. Customers could then subscribe to multiple vendors without the hassle of running multiple often conflicting antimalware software. Cliffe.

  58. what the hell? by LeeBarnes · · Score: 1

    Free anti-virus from Microsoft? I can't believe it! Why are they doing this first? I don't get it- I'm still waiting for those free checks from Bill Gates for sending out all those emails!!!!

    Where's the justice in this world!?

    --
    "Before humanity, the stars shone throughout the heavens. After humanity [has gone], the stars will continue to shine"
  59. Free framework, paid subscription by Anonymous Coward · · Score: 0

    Perhaps an improvement would be to provide a free malware removal framework and allow antimalware companies to provide subscriptions to malware signatures. The framework would need to provide all the current detection and removal methods of current products. Customers could then subscribe to multiple vendors without the hassle of running multiple often conflicting antimalware software. Cliffe.

  60. bull ain't liftin' its tail without seein' nothin' by Axe4ever · · Score: 1

    I was wondering whats the whole point of giving things free ? There are really good stuff out there in the wild wild net and how different will MS anti-virus be compared to others ? And why now ? Well, the bull ain't liftin' its tail without seein' nothin' !!!

  61. OK, I'm back by symbolset · · Score: 2, Funny

    Mr. Obama: "And now Mr. Ballmer, let me show you my fully armed antitrust division."

    AV companies: "I can haz bailout?" Paulson: "No can haz. Not yours."

    But will there be a Linux version?

    Of course it requires WGA. Why wouldn't it require WGA?

    Somebody stop me please.

    --
    Help stamp out iliturcy.
    1. Re:OK, I'm back by Terrasque · · Score: 1

      This is exceedingly apt, as the norwegian word for fun is ... "morro" :)

      Yeah, the norwegian IT press is having a field day with this.

      --
      It's The Golden Rule: "He who has the gold makes the rules."
    2. Re:OK, I'm back by marcosdumay · · Score: 1

      Funny, "morro" is the portuguese word for die, when conjungated in "I die". I think that is also true for spanish.

    3. Re:OK, I'm back by shutdown+-p+now · · Score: 1

      But will there be a Linux version?

      Yes.

      #include <stdio.h>
      int main() {
      puts("No virii found");
      }

    4. Re:OK, I'm back by johnathan · · Score: 1

      puts("No virii found");

      Any viruses, though?

      --
      You don't need a weatherman to know which way the wind blows.
  62. Integration by techdojo · · Score: 1

    You know, I've been a Norton fan for years and watched my PC slow down as a result. I switched to Avast this year and yesterday was presented with the first XP blue screen I've seen in a while. When the PC came back up, it claimed it was due to anti-virus software.

    At least with MS touting anti-viral capabilities, there will be less finger-pointing capability. Company X didn't use the right hooks/API's! MS didn't document them well! Company X should've blocked this! MS shouldn't have been vulnerable to it!

    Personally, I have to give MS props for stepping up. The potential PR vulnerability dwarfes the OS exposure.

    ________________________________
    http://techdojo.org/

  63. Re:because most anti-virus is useless and expensiv by symbolset · · Score: 3, Informative

    The reasons why antivirus software exists is because Microsoft software security uniformly sucks, almost all software for the platform is pathetically vulnerable to exploitation and people don't patch it - mostly because the patches themselves are often toxic and because the patching system is so archaic every program needs its own update monitor and installer, each with permission to update software on the box and each subject to its own vulnerabilities. People also don't patch because many of them are using pirated windows or other software and are leery of getting the WGA virus, so they don't patch and become a persistent blight on the global network.

    Microsoft making an antivirus isn't going to solve any of these problems, and Microsoft making the quality of antivirus software that matches their anti-malicious software effort will make things worse. It will, however, drive yet another category of software partner out of business. It's good to have goals, I guess.

    --
    Help stamp out iliturcy.
  64. Window$ uninstaller by Anonymous Coward · · Score: 0

    Probably a Window$ uninstaller ??.

  65. Microsoft has not done this since MS-DOS 6.X by Orion+Blastar · · Score: 1

    Because the Windows Defender and other Microsoft AV software are almost total crap and not a real AntiVirus program. Non-MS Antivirus programs seem to find malware that Windows Defender won't like trojans and rootkits and spyware and adware.

    MS-DOS 6.X had Central Point Antivirus with the Microsoft name on it.

    Windows Defender etc did not come built in with Windows like CPAV did. It was an add on, but in many geek's opinion a commercial Antivirus or even a free one like Avast! Home Edition or AVG Free was better than Windows Defender.

    --
    Remember, Slashdot does not have a -1 disagree moderation, and no, troll, flamebait, and overrated are not substitutes.
    1. Re:Microsoft has not done this since MS-DOS 6.X by setrops · · Score: 1

      Wow I did not think anyone would have remembered that.

      http://findarticles.com/p/articles/mi_m1563/is_/ai_13787055

  66. MS$ Antivirus should delete its own O.S. by Anonymous Coward · · Score: 0

    The first thing this Anti-Virus software should do is detect you are running the biggest virus of all, namely Windows, and delete it, replacing it with a less virus prone O.S. such as Linux.

  67. in other news... by Anonymous Coward · · Score: 0

    HyVee grocer line sells its own brand of products... and the worst part is, they do this IN THEIR OWN STORES..the wholesellers incomes are thus damaged and justice must be brought down on the ebil HyVee overlords before they destroy the grocer supply market systems all over the universe!!!!

    BE AFRAID BE VERY AFRAID....YOUR HYVEE COULD BE STEALING INCOME FROM THE OTHER BREAD PRODUCERS OUT THERE BY SELLING THERE OWN VERSIONS....THEY ARE EBIL!!!!! /. screams about innovation being squashed by thoughtless idiots with baseless legal crapspeak all the time...but are more then happy to squash any innovation if it is from MS...

  68. Welcome to 1993 by Anonymous Coward · · Score: 1, Interesting

    I wonder which vendor they will buy the code from.

    Just like MSAV was re badged CPAV (CheckPoint Anti Virus) from central point.

  69. My two cents by moniker127 · · Score: 1

    I just hope it isnt welded into windows 7. I also hope they integrate it with their security center crap, and make it modular, and removeable from windows. Firewalls are for companies, hackers, and computer illiterate people. Antivirus software is just for chumps.

  70. Does it make any sense? by mlwmohawk · · Score: 1

    I mean come on, think about it!

    Viruses thrive on Microsoft Windows because Microsoft can't get security right in the first place.

    Microsoft now tries to make an anti-virus product to fix the holes it creates in Windows.

    Wouldn't it just be easier to fix Windows? Oh! Wait, that's right, Microsoft doesn't *fix* anything, they just add features.

    It has to be some inside joke at Microsoft. They screwup Windows so bad that they create an ISV cottage industry of companies creating software to plug the security holes. Then rather than actually FIX the problems, they use their monopoly position to put them out of business.

    Its just insane.

    1. Re:Does it make any sense? by freedom_india · · Score: 1

      It is ironical that Code Complete and Writing Solid Code, the BEST books on writing good code are published by Microsoft Press.
      It is more ironical that a company synonymous for the WORST quality software provides a free tool to fix the same...
      I don't know whether to laugh or cry.
      I use kaspersky, and will continue to use it...Free MS or not.

      --
      "Doing what i can, with what i have." ~ Burt Gummer
  71. About time! by jdawgnoonan · · Score: 1

    It is about time that Microsoft finally helps protect their customers from the flaws in their applications and network stack. They should have been doing this for years as I find it completely unacceptable to have to subscribe to third party software to protect my PC. That is why I use a Mac. Four years running: No viruses, no spyware (and never any OS related crashes or malfunctions). I am a Windows developer with 10 years of experience as an SA of 300 Windows servers; I am pretty proficient with Windows.

  72. Good riddance by Anonymous Coward · · Score: 0

    Good riddance to all that goddamn useless bloatware. The cure is worse than the disease.

    If Microsoft can't point fingers at a third party when their OS runs dog shit slow, or gets a virus, maybe, just maybe, they will actually be motivated to make something that actually (1) works and (2) isn't completely shitware like everything else out there. I.e. - this setup puts the reward/motivation in the right place. The status quo incentives are all wrong, and the end result is pure crap.

  73. Faster by rusl · · Score: 1
    Actually I think this is a really smart move of M$. Sure we can all punch holes in it but its been that way for years.

    What this will do that is so brilliant is allow the typical I'd-rather-not-touch-anything hotmail user who wants to keep it simple to do just that. People install a virus scanner they don't understand and it slows down their computer. This M$ version will presumably run much more quickly and not bog things down as much. This is probably the easiest way to speed up the average speed of installed windows platforms the world over. That will impress a lot of people.

    Next, re: Patches, this will give a quicker way to update rather than waiting for quarterly patches. Windoze really needs that, most linux suites usually include an update manager that does just that.

    I'm sure there will be major embarrassing problems for them but this is one of their wise moves. It will cut into but not kill the commercial anti-virus software market, sure, but the important things are speed and speedy patching.

    As usual, just when you think M$ will collapse in stupidity they pull another thing like this out and the tank keeps on rolling.

    My biggest worry as a non-M$ user is that these changes will eventually become so ubiquitous that Linux GUI designers will start making it in a way which mimicks the M$ design somewhat which is always stupid because you know it is regression. (Why does Evolution and Thunderbird mimic outlook instead of Eudora, why does OpenOffice Mimick Office instead of AmiPro or something better??? M$ always lowers the bar)

    --
    Stupidity is its own reward.
  74. Re:Captain Inane by Anonymous Coward · · Score: 0

    You are aware of course that Windows XP Media Center Edition, Windows Vista Home Premium, and Windows Vista Ultimate can all play DVDs out of the box right? Admittedly, this is somewhat late to the game... but at least WMP and Media Center have progress bars...

  75. They just can't win with you, can they. by Anonymous Coward · · Score: 0

    Microsoft just can't win with you, can they? They volunteer up free AV software and it's a bad thing? What the hell is wrong with all of you people?

    1. Re:They just can't win with you, can they. by ozmanjusri · · Score: 1
      What the hell is wrong with all of you people?

      We've used Microsoft products before.

      --
      "I've got more toys than Teruhisa Kitahara."
  76. The Real Question Is... by elthicko · · Score: 2, Funny

    does it detect Vista as a virus?

  77. It will catch fire, burn, and kill customers by Anonymous Coward · · Score: 0

    The same name was given to the SS Morro Castle, which had a disastrous fire at sea off New Jersey. Myopic design flaws and human errors allowed the fire to spread past "fireproof" bulkheads with ease. The emphasis on fancy looks meant ample wood paneling and many thick coats of oil based paint covering the steel, turning supposedly non-burnable walls into fuel for the fire. The fire hydrant supply was adequate for only a fraction of the taps, incapable of keeping up with a major fire that required all resources to be used to save the vessel. The analogies go on and on!

  78. I don't know... by blueZ3 · · Score: 4, Insightful

    I don't believe in trusting the wolves to guard the sheep.

    Why would anyone sane trust the company that either a) couldn't be bothered to fix exploits, or b) doesn't have the smarts to find the exploits, to protect them?

    If Microsoft can afford to find these exploits and block them using their AV product, why can't they just patch the OS? It could be the deafening sound of greed... or some other, more mundane reason.

    But my basic question stands: if they can do this in AV, why can't they do it in their OS?

    --
    Interested in a Flash-based MAME front end? Visit mame.danzbb.com
    1. Re:I don't know... by polymerousgeek · · Score: 1

      But my basic question stands: if they can do this in AV, why can't they do it in their OS?

      One word: Marketing.

      Ooh, ooh, mommy, this one has built-in anti-virus.

      --
      53 49 47 53 20 53 55 43 4B
  79. Overall its good ... by HW_Hack · · Score: 2, Interesting

    MS providing a free AV solution will put pricing pressure on 3rd party providers and add some competition.

    A decent basic malware package (AV and spyware -- not a security suite) should not cost more than $15 to buy and $10-$15 a year subscription

    --
    Its not the years, its the mileage .....
  80. lessee here... by shentino · · Score: 1

    1. Release buggy OS that can be raped in the butt by malware
    2. ???
    3. Profit!

    Oh wait, this is step 2 :)

  81. Good Idea by binaryspiral · · Score: 3, Interesting

    It's a good idea. sure Symantec, McAfee, and the rest are going to lose some business - I doubt it'll be a big enough dent to notice. Folks that will rely on the microsoft offering will be the same people that rely on Defender for malware prevention. Those slightly more technology minded will identify the need for something more robust.

    Chalk my vote up in the "its better than shipping it with a trialware sales pitch for some other crap" column.

  82. Bad Strategy by carlzum · · Score: 1

    Ok, so they manage to dominate the AV market and drive the competitors away. Now viruses and malware are Microsoft's problem, but I doubt consumers will pay more for Windows when "free anti-virus" is no longer a seen as a benefit. It seems short-sighted to me.

    1. Re:Bad Strategy by 99BottlesOfBeerInMyF · · Score: 1

      Ok, so they manage to dominate the AV market and drive the competitors away. Now viruses and malware are Microsoft's problem, but I doubt consumers will pay more for Windows when "free anti-virus" is no longer a seen as a benefit. It seems short-sighted to me.

      Yeah, because it has worked so poorly in the dozens of other markets they've bundled and killed. Notice the cost of Windows relative to the rest of the computer and other software has been going up and up, with very little in the way of actual improvements or R&D. So long as they don't get effectively busted for the illegal nature of their strategy they will make money doing this and have to pay only a fraction of that money in legal settlements to the anti-virus companies they are killing.

  83. But MS already have Antivirus software! by therufus · · Score: 1

    Surely any tech out there that works on Windows PC's will know the brilliant Microsoft Antivirus Suites the company has to offer.

    Examples: XP Antivirus, Vitae Antivirus, Windows Antivirus, Antivirus Pro, Antivirus 2007, 2008, and 2009, System Antivirus, Vista Antivirus, and XP AntiSpyware 2009

    All quality software that inform you of the hundreds of infections your PC has.

    This is a joke by the way, enjoy your vundo virus ;)

    --
    You moved your mouse. Please restart Windows for changes to take effect.
  84. Re:style by Voyager529 · · Score: 1

    cout >> "I have no patience to program anything useful and I hate having to write code";

  85. Windows Defender v2 by anoop_thomas · · Score: 1

    Another name for Windows Defender. does nothing extra than older versions.

  86. implications for FOSS? by sr8outtalotech · · Score: 1

    What I don't get from the reading the article, is that Microsoft is not bundling this product like IE or Media Player but making it available for download for free. The problem the A/V vendors have is that it will stifle competition. I know it's not FOSS but what implications does this have for FOSS? You can't give something away for free if it will hurt competitors? How can they be establishing a unlawful competitive advantage if they don't force people to use it?

    1. Re:implications for FOSS? by LingNoi · · Score: 1

      It doesn't effect Linux because Linux makes up 1% of the market. If we pretended that Linux made up 90% of the market then I doubt it would matter because Linux has always had all it's apps like this from the beginning.

      This is different from Windows that has allowed the parasite of AV vendors to exist, now it has grown into a cancer they can't operate on.

  87. Re:style by dword · · Score: 3, Informative

    cout >> "I have no patience to program anything useful and I hate having to write code";

    You're right about this one, because you got the operator wrong:
    cout << "I have no patience to program anything useful and I hate having to write code";
    I guess I was wrong in the first place :)

  88. It don't work! by catdevnull · · Score: 1

    That new fangled Antivirus 2009 thing is a total gyp. I've been clicking that thing all day...wait, now a Java update is prompting me. Jeesh. I gotta go, that Nigerian millionaire's needs my help..

    [/end user speak]

    --

    I might know what I'm talkin' about, but then again, this is Slashdot...
    1. Re:It don't work! by Anonymous Coward · · Score: 0

      Funny how your silly comment captures the biggest computer security liability of the age: the user.

  89. OK, let me get this straight by cheros · · Score: 4, Insightful

    Let me see if I get this correctly.

    MS has supplied bad code for so long that an entire market has evolved around keeping that creaky wagon a bit safe. A bit like some dominant car manufacturer supplying cars without brakes, thus creating a whole aftersales market for brakes, parachutes, airbags and wall padding..

    In other words, NO track record whatsoever (nil, nada, zilch) of writing anything that actually fixes the problem they have created themselves (which figures, if they ever fixed the OS properly they would no longer be selling hope - that's the whole Vista vs XP problem), and someone is supposed to trust THEM to get it right? I bet there are plans to charge for this "feature" as well at some stage.

    (shakes head in disbelief that people continue to fall for this)

    --
    Insert .sig here. Send no money now. Owner may sue, contents will settle. Batteries not included.
    1. Re:OK, let me get this straight by justinlee37 · · Score: 0, Troll

      MS has supplied bad code for so long that an entire market has evolved around keeping that creaky wagon a bit safe

      Do you have any evidence that this is any way Microsoft's fault, or does the fault lie with malicious hackers and uneducated users, which any mainstream operating system would be subjected to?

    2. Re:OK, let me get this straight by justinlee37 · · Score: 2, Insightful

      3 of your links are 404. The rest are just anecdotal. Pointing out flaws in system A doesn't rule out the possibility that there are similar flaws in system B. Without a thorough comparison it doesn't support the hypothesis that system A is "the worst." Additionally, "putting on the net" is ill-defined. By "put on the net," do you mean, run a malicious executable? That could potentially reduce any system to a pile of slag, REGARDLESS of the OS installed, and many users practically do it willfully by running executables from unreliable sources. Of course, a comptent user can recover from any worst-case scenario (on any OS) simply by wiping the drive and re-installing the OS of their choosing.

      I guess my point is ... yeah, I do need more proof, actually. You can't just show that someone exploited Windows. You have to show that Windows was categorically exploited more than other Operating Systems. To do that you'll need aggregate data. You also have to show that this is due to inherent flaws in the Windows system, and not merely due to the fact that malicious hackers (who like things like bank account passwords and credit card numbers) wanted to target the most widely distributed Operating System known to man in order to maximize their profit.

      Good luck.

    3. Re:OK, let me get this straight by freedom_india · · Score: 1

      You have to show that Windows was categorically exploited more than other Operating Systems. To do that you'll need aggregate data.

      Oh...sorry man. I don't have that data.
      Proving Windows was exploited MORE than other OS on same percentile (80% of Windows hacked, versus 80% of AIX hacked, both having different numbers of installs) is something i don't have and can't find because of agrregation numbers.
      Guess i misunderstood your earlier post...
           

      --
      "Doing what i can, with what i have." ~ Burt Gummer
    4. Re:OK, let me get this straight by justinlee37 · · Score: 1

      No worries, I never really expected my question to get a straight or thorough answer, I just like to challenge people's assumptions by asking hard questions.

    5. Re:OK, let me get this straight by cheros · · Score: 1

      I think the definition of mainstream is an interesting one. I know MS likes to wave that as a reason why it gets so much more "hack attention" but that argument is by now so debunked I don't have to bother.

      A simple question is, for instance, why it has taken all the way to Vista before users don't run admin by default or at least have to give extra permission (typically the good concept got butchered, but let's assume they did it right).

      Don't get me wrong, I'd LOVE MS to get its act together, but for a company that buys up all the talent in the market their return on investment there is seriously poor.

      --
      Insert .sig here. Send no money now. Owner may sue, contents will settle. Batteries not included.
    6. Re:OK, let me get this straight by jimicus · · Score: 1

      Or, to put it another way:

      "The idea that Bill Gates has appeared like a knight in shining armour to lead all customers out of a mire of technological chaos neatly ignores the fact that it was he who, by peddling second-rate technology, led them into it in the first place."

      Douglas Adams said that of Windows '95. Some things never change.

    7. Re:OK, let me get this straight by justinlee37 · · Score: 1

      but that argument is by now so debunked I don't have to bother.

      Yes, actually, you do.

    8. Re:OK, let me get this straight by justinlee37 · · Score: 1

      Psh, to the asshole who modded me Troll and any other who would have -- tell me, on your OS of choice, do you not use a third-party virus detection software?

  90. Netscape Navigator vs. Internet Explorer: Part II by pseudonomous · · Score: 1

    ... seriously

  91. Re:style by Voyager529 · · Score: 1
    Do I still get style points?

    Joey

  92. Correction by istartedi · · Score: 2, Insightful

    Next OS release will finally be patched. There. Fixed that for ya.

    Seriously though, how can the AV vendors have any leg to stand on? Whatever happened to that suit the makers of patches for inner tubes brought against the tire companies when tubeless tires were introduced?

    As for this creating a security monoculture, and for that having an impact, then AV companies will just re-emerge.

    Sorry. I have a hard time shedding any tears for AV companies. I don't run AV, it just slows down your machine. I'm vigilant, and have occasionally had to manually remove infections over the years. It's high time MS itself addressed the issue. If there's anything wrong it's the way they're doing it.

    Instead of presenting their solution as AV software, they should present it as better control over the installation and running of executable code. That's all infection really is anyway--the undesired modification or introduction of executable code. If you can control that, you have solved the AV problem. The challenge is that there are so many legitimate executables, DLLs, processes, threads, etc. on a box that it's information overload even for technical users. Some of the solution's I've had in mind are a bit too much for a /. post.

    DEP was a step in the right direction. I've seen it in action a couple times now.

    Bottom line though, is that AV should have been nipped in the bud long before AV companies became so big. I mean, not just one, but a whole category of companies based on fixing a fundamental flaw in another company's software. I mean, just... wow.

    --
    For all intensive purposes, "whom" is no longer a word. That begs the question, "who cares"?
  93. Doing it Wrong by Anonymous Coward · · Score: 0

    If microsoft wanted to make the computers secure by default and avoid lawsuits by antivirus types, then they're Doing It Wrong.

    Just work (alot) harder at making it less vulnerable to start with. There's a reason why an entire MARKET sprung up around Windows security.

  94. Horay! by Casandro · · Score: 1

    If Microsoft now steps on the feet of all those malware removal providers maybe they'll stop claiming that MSes products are completely secure and any remaining security problems will surely be fixed soon.

    I mean seriously, get Ubuntu and look how software installation is handled there. You'll stop understanding why Windows doesn't have a propper package manager.

  95. Create your own anti-virus software... by Anonymous Coward · · Score: 0

    Run "XOR 0xff" over a Windows install disc.

  96. Too Large To Fail by deanston · · Score: 1

    MSFT has finally unveiled its long term strategy. They already own the market for browser, office, and development platform and server wares on their own OS, might as well corner the antii-virus business too. Somebody at M$ marketing finally figured out how to turn a weakness into strength, a losing battle into a business opportunity and profitability. Pure genius, I tell you! Pray that MSFT shares do not go down or they'll hit up the government with a bailout threat too.

  97. HaHa by secondhand_Buddah · · Score: 3, Funny

    This is like the cigarette companies selling cancer treatments.

    --
    Participatory Governance : The only feasible option for a real democracy, where everyone really does have a say.
    1. Re:HaHa by shutdown+-p+now · · Score: 1

      This is like the cigarette companies selling cancer treatments.

      Well, at least you know they're intimately familiar with the problem, right? ;)

  98. Ever used the windows zip stuff ? by tyl · · Score: 1

    At some point, I believe it was XP but maybe already in Win2K, M$ included zip/unzip capabilities in the "OS". It was incredibly slooooooooooooooooooooooooooooow.

    For me, it meant that, exactly as before, Winzip or some such product remained on the list of software to load immediately onto a freshly installed box.

    Same thing with the included firewall - I for one don't trust it one bit, I'd never rely on it for decent protection. At most, I see it as something that will con the pc-illiterate user into thinking s/he's protected without having to pay anything on top of the M$-tax, and I suspect that is the only reason they keep coming up with these bits that dupe stuff that's already out there.

    If their anti-virus effort will be anything like these, I suspect nothing much will change...

    Xeers,

    Philip

    --
    -- Any sufficiently advanced level of incompetence is indistinguishable from malice
  99. Bad thing? by Anonymous Coward · · Score: 1, Insightful

    How can a new antivirus software be a BAD NEWS in any way? I'm tired of this antimicrosoft-bullshit really, how many people there are out there using computers without even such basic knowledge as to install antivirus-program for themselves? Like my dad, for example. If this comes with windows and lowers the count of infected zombies in net then it's good news. We, who know better, can get ourselves better programs.

    It's idiotic how bare ie windows xp is when you install it. This is something that's been waited for.

  100. Short-term alternative by Anonymous Coward · · Score: 0

    Would it not be possible for MS to roll out a trojan removal tool to target spam botnets via automatic updates, as they do with the existing Malicious Software updates? It would at least cut the global spam levels down a bit, assuming Windows users have automatic updates enabled.

  101. vnc by leuk_he · · Score: 1

    It will also kill vnc since it is detected as possible malware.

    It is easier to remove vnc than to make a malware excpetion.

  102. This begs the question.... by Joce640k · · Score: 0

    Why do antivirus programs present users with a "Do it anyway" option?

    They should just say "That's a virus!" and totally block it.

    As for Microsoft anti-virus: If their malware removal program is any good then why is the world's biggest botnet over three years old? The monthly cleanup currently being done by Windows update should be wiping it out.

    --
    No sig today...
    1. Re:This begs the question.... by Bert64 · · Score: 2, Interesting

      Because if they don't, it takes away a perceived level of control from the user, and users like at least having the feeling that they're in control.

      Also there are often false positives, and it would be extremely annoying to be unable to install something useful because it's mistakenly detected as a virus.

      From the perspective of malware authors tho, microsoft taking over the anti malware market and driving all the other competitors out of business is the best possible outcome. You now only have one anti malware program to test your malware with (ie ensure it doesn't get detected) and one anti malware program that your malware needs to disable.

      --
      http://spamdecoy.net - free throwaway anonymous email - avoid spam!
    2. Re:This begs the question.... by drx · · Score: 1

      All these ideas make me think that protection from malware is already worse than malware itself.

    3. Re:This begs the question.... by Anonymous Coward · · Score: 0

      Because it's not "That's a virus". It's "That looks like a virus".

      It may be a virus, or it may be user32.dll. Would you really prefer not getting a choice?

    4. Re:This begs the question.... by LingNoi · · Score: 1

      Sadly, the error has grown more and more common with time, such that even journalists, advertisers, and major mass media entities have fallen prey to "BTQ Abuse."

      That's because languages written and spoken change from generation to generation. Fucking deal with it.

      If you can't then perhaps you should realise we don't go around talking Shakespearian and that you're a douche bag.

    5. Re:This begs the question.... by happylight · · Score: 1

      Thanks but no thanks.

      Antivirius programs have a habit of blocking totally legitimate programs like password cracker, memory scanner/editor, packet editor, game trainer, etc.

      There should always be a way to have exceptions.

    6. Re:This begs the question.... by quanticle · · Score: 1

      Two words: false alarms. I've certainly had issues with people getting false alarms from anti-virus for legitimate (virus free) programs. This especially seems to be an issue with system utilities, like anti-spyware and the like. I also used to have issues with A/V flagging ethereal as a virus (probably because of its network activity).

      --
      We all know what to do, but we don't know how to get re-elected once we have done it
    7. Re:This begs the question.... by Anonymous Coward · · Score: 0

      I find peopke like you, who want to turn stupid language mistakes into the norm and rabidly defend your rights to be drooling, stupid-mouthed idiots, quite disgusting.

      Now if you'll excuse me, I'm off to teach my college-level Ebonics course at the local black university. Ya heard?

  103. Finally by thommym · · Score: 1

    Finally Microsoft will give up their so called operating system and go for UNIX.

    --
    Don't feed the penguins
  104. MS gets to track license numbers by Alain+Williams · · Score: 2, Interesting
    Presumably: for this to work the PC will need to download new virus signature files, etc, every day. A natural part of this would be to send up the license number -- so that the MS servers know what new signatures have arrived since it last connected.

    A side effect of this will be that MS will be able to readily identify where license numbers are being used more than once. If they take the opportunity to remotely shut down ''illegal'' PCs, the whole exercise might make them money.

    I wonder if they will do an Apple and disable s/ware that they don't like (pronounce as malware) -- because it competes with some MS s/ware.

    1. Re:MS gets to track license numbers by shutdown+-p+now · · Score: 1

      Presumably: for this to work the PC will need to download new virus signature files, etc, every day. A natural part of this would be to send up the license number -- so that the MS servers know what new signatures have arrived since it last connected.

      It obviously wouldn't have to be "license number" (do you mean "serial key")? A much more reasonable scheme is for the client to send the date it last connected, and for the server to push to the client all updates since that date. In fact, that's how most (all?) of them work already.

      This isn't to say an MS AV wouldn't still try to do any sort of that "genuine validation" crap. But I doubt that - they already have a thing that does that, it's called Windows Update - and, given that it's enabled by default on a Windows installation (if you just click through all installer questions), I'd imagine its coverage is way higher anyway.

  105. Muppet! by PinkyDead · · Score: 1

    You forgot to put the URL behind that 'somefamouspersonnaked.exe' link - I've tried clicking on it but nothing happened.

    --
    Genesis 1:32 And God typed :wq!
  106. The way I see it by Pvt_Ryan · · Score: 1

    is as a consumer I WANT as much as possible in the OS I am paying for.

    I don't want to have to think buy computer, buy OS, buy video player (after all the Stupid EU voted to have a version of windows shipping without media player :S who would pay for less considering both versions cost the same), buy AV software.
    Now offer me all of the above in one price then ok that starts to sound better. AV companies tend to get false positivies and tend to cause system stabality problems. Now if MS offer a AV solution bundled with their OS I know full well it is going to work flawlessly with their OS.

    There is no point in really going after MS for anti-competiveness because lets face it their OS is the most used in the world so they are already uncompetive, what's the choice APPLE or LINUX? both are viable alternatives for users that word process or surf the web, but for say gamers there is no choice. It's MS or a console

    Personally I don't use AV software why?
    Because I have had more problems with it than without, and if MS shipped with it built in then I may actually use it providing it doesn't impact the system.

  107. im confused by bryctucker · · Score: 1

    while i like the idea of free Anti-virus software, it will kill the competion, witch is not a good thing, pretty sure everyone knows that. i don't get this, i once heard a rant from bill gates about the software dev's not getting paid for their work, this was about freeware and open source software. so now he is starting to give out free software? i bet what will happen will be microsoft makes it free, kills the competion, then jacks up the price 10 fold of what it was before.

  108. Lets look deeper by DaveDerrick · · Score: 1

    Microsoft NEVER do something for nothing, its always about turning a buck or making a rival bankrupt. My guess is this new offering will only work on Windows 7 and Vista, in an attempt to force us into leaving XP behind.

  109. And the problem is? by Conor+Turton · · Score: 0
    I'm sorry but I fail to see the problem. You have Avast, AntiVir, AVG,Bitdefender, Clamwin, Comodo, F-Prot etc etc etc so it's not as if a free antivirus product is something new.

    In the light of all the above being available, plenty of people still pay for anti-virus software. I do. I use Esets NOD32 and will continue to.

    Microsoft offer Windows Defender yet people still prefer to use Spybot S&D et al in their droves thus proving that just because MS offer something for free in a sector, it doesn't automatically follow that people will go for it.

    --
    Conor "You're not married,you haven't got a girlfriend and you've never seen Star Trek? Good Lord!" - Patrick Stewart
  110. You forgot some by kevingolding2001 · · Score: 1

    How about:
    - Viewing event logs (Note that viewing means read only)
    - Running many applications... each and every time they are run.
    - Viewing the 'System' part of control-panel to find out how much ram (once again read only)
    - Anytime any one of the numerous random pieces of bloatware decides it wants to check to see if updates are available.

    Face it, your lucky to go 30 seconds without the screen suddenly darkening and the interruption of normal programming to bring you this annoying piece of nagware.

  111. Free Anti-Virus as a feature? by sega01 · · Score: 1

    Why don't they just spend their time writing a secure system that doesn't need AV guarding the keys to root? I can somewhat understand the uses of AV at the user level; more for people running proprietary software, but nothing that the user does should be able to compromise the rest of the system. People should see this as a _problem_, not a nice "free" feature.

  112. Exactly, they couldn't sell it by marcosdumay · · Score: 1

    That is exactly the point, MS couldn't sell anti-virus software in any way. The only options they have is distributing it for free, or not distributing at all. This latter option looks like the best for them, but they can't take it anymore since they spent a small fortune buying an anti-virus a few years ago, expecting to sell the product, and have to explain to shareholders why they didn't see the criminal consequences of selling protection against your own incompetence.

    Now, they'll only have to explain things to the governments around the world, and those are way more receptive than shareholders. The only thing that can happen is them being forced to stop distributing the anti-virus, that is the best outcome for MS anyway.

  113. Re:style by LingNoi · · Score: 1

    std::cout << "The parent can not code for shit." << std::endl;

  114. Oh pleasee by hesaigo999ca · · Score: 1

    They tried this beofre, and it didnt work, they offered it free for a 30 days, then you had to buy it, if I have to buy something I will go with the best there is either zone alarm or kaspersky,
    not M$ who can't even get their products right in the first place. A virus is something that attacks your vulnerabilities, therego have a perfect software no need for AV, this is like M$ saying
    "ok you bought your program from us and it belongs to you, but if you really want it to work the way it should, you should pay us again"

    M$ go f*ck yourself, if you can't get your OS right to begin with, I doubt you'll be able to now either....let me take a chance with McAfee or Symantec before I trust you again!

  115. Solving root causes instead of symptoms by Device666 · · Score: 1
    It would be nice to see antivistus software become unneccesary by solving the root causes to security flaws in Microsofts system and their code, instead of pushing thirdparty antisoftware out of the market by providing antivirus software for free. Instead of trying to patch the security related symptoms like virusses etc, microsoft would be far more convincing solve root causes that lead to insecurity symptoms. To that cause Microsoft should do something about their bugs, security architecture and other exploitable flaws.

    Microsoft has proved throughout history not solving bugs or other security related issues, partly because of their interest to push new product versions into the market. So that said, it is not a very promissing story to the customer. Independent third parties have more interest in solving security related symptoms, and they are more effective at it because it's their core business. If Microsoft would be able to get a monopoly on antivirus software by providing this software or free, we all would lose.

    Instead of having a laserlike focus on core business and being very good at it, Microsoft continuosly seeks to have a monopoly of mediocracy on all businesses by having no core business. Despite Microsofts succes pushing thirdparty software business out of the market, fortunately the open software community will only thrive even more with high quality solutions which make Microsofts mediocre products obsolete. In the end the open source software has proven to be superior in delivering best of breed software.

  116. I'm not so sure this is a good idea by Xabraxas · · Score: 1

    This is bad news. Microsoft's security products suck big time. Their AV was compared against other top AV brands last year and failed miserably compared to Symantec, Kaspersky and others. I have never used it myself but if it is anything like Windows Defender, which I have used, then it definitely sucks. Defender never finds anything even if the system is teeming with spyware. Customers won't care though and they won't buy the additional software. This is bad news for the big box stores too. They're already losing money on their sale computers and they generally try to make up the difference by selling you software and other crap.

    --
    Time makes more converts than reason
  117. They won't by marcosdumay · · Score: 1

    Anti-virus sellers will never claim that Windows is less secure than the alternatives. It's the only way they stay in business, if they ever recommend any other plataform, they'd become useless. MS can hurt those companies any way they want, it won't create a problem bigger than extinction.

  118. No by marcosdumay · · Score: 1

    It is like cigarette companies giving (useless) cancer treatment for free, and people complaining that this will make the competing business (that actualy curate people) go out of business.

    You know, analogies have some limits on how far one can push them.

  119. The return of MSAV by Sardonic1 · · Score: 2, Informative

    Second time is the charm anyone, or are most of you too young to remember them giving it away before?

  120. of course by Anonymous Coward · · Score: 0

    it's called Morro, because the only people using windows and still without an anti-virus program installed are "morrons"

  121. This has been out for years... by BronsCon · · Score: 1

    It's called fdisk.exe

    --
    APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  122. But will it support Windows Home Server? by jlobello · · Score: 1

    Windows Live OneCare doesn't support Home Server. I wonder if the "new" offering will?

  123. hmmm Antivirus? by primefalcon · · Score: 0

    I don't really know if it's an antivirus that's really needed from Microsoft. They just need to spend their time making Windows as immune to viruses as Linux is. Security and safety were one of the reasons I stopped using windows a long time ago.

  124. Possible features by Anonymous Coward · · Score: 0

    I wonder that possible features will be included in the Free AV. It all very well good giving a free AV, but if it does not actively protect then it is useless. It is like using medicine to protect against STI's rather than using Condoms.

    There are lots of free AV around, some offering onaccess and some do not.

    Perhaps MS will offer the free version like other vendors do, but for advanced protection like onaccess perhaps you will have to pay.

    I wonder what will happen to pc manufacturers though if MS release a version with onaccess etc, There will be no point including th trial copies of norton etc. They will have to replace it with some other annoying trial

  125. Re:because most anti-virus is useless and expensiv by shutdown+-p+now · · Score: 1

    ... because the patching system is so archaic every program needs its own update monitor and installer

    It doesn't. There are standard tools and APIs provided for that by Microsoft, have been around for ages (e.g. ClickOnce). It's just that there is that Windows developer mentality that if you need an updater, you have to roll out your own, give it an ugly tray icon complete with baloon popup barrage every time it thinks it needs to update, etc. That is still the same old problem in the Windows land - it is possible to make very nice and well-behaving software, everything that's needed is there - but virtually noone is bothering to learn how to use it.

  126. Talk about by Anonymous Coward · · Score: 0

    the chicken guarding the hen house. hehehe.

  127. History attempts to repeat itself by Anonymous Coward · · Score: 0

    The problem here as I see it is that Microsoft is doing the same thing it did with Web Browsers. Unable to sell the Web Browser by itself, it packaged it with the OS, driving nearly all other browsers to extinction. Remember Netscape the company?

  128. Re:re Hard to decide ... Conflict of Interest? May by davidsyes · · Score: 1

    be that they are desperately trying to achieve "obscurity through security"...

    --
    Previously: "Linux... Toward the Sunrise..." Now: "Linux... Toward the-- No, now, part of Every Sunrise"
  129. Microsoft products are NOT "very good" by Master+of+Transhuman · · Score: 2, Insightful

    They consistently test near the bottom third of all the malware test suites I've ever read about.

    Windows Defender in particular irritates the crap out of me because it reports tons of "suspected software" in the Windows event logs without being able to do anything about it - either shutting off the spurious messages or specifying that the software is safe. It's pathetic. It also detects things like Adobe's crappy License Manager creating bogus "services" repeatedly.

    Use Spyware Terminator or SuperAntispyware instead of Windows Defender and use a decent brand name AV instead of anything Microsoft might sell OR give away free.

    The only advantage to a free Microsoft product is that the company idiots who don't run AV because they're too cheap might actually use it. I've got one small business client I had to put Comodo AV on their machines - even thought Comodo detection rates suck - because they're just too cheap to pay for Kaspersky or Avast.

    --
    Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
  130. It's only a good thing by geekangel · · Score: 1

    It's amazing that it took them this long, but I've been waiting for it to happen, the time is right.

    Microsoft's usual pattern is this:

    • ignore a hard technical issue.
    • third parties pop up to solve it
    • if the problem is real (ie: everyone has to have a third party's software) they notice
    • vendors become microsoft partners
    • microsoft creates nice APIs for the vendors products to implement, along with serious framework. The vendors love it
    • microsoft implements the API itself and includes the API in Windows for free
    • niche dies

    If you once wrote proprietary faxing software, or CD burning software, or even IDEs (with .Net they created the API+framework and implemented it at the same time, slightly different but still devastating), or, well, cruise through Control Panel or Accessories or Administrative Tools for more examples, anyway you can see what I mean.

    And in the end, it's good. Once stuff subsumes into the "OS", it just becomes easy.

    Anti-virus got to the API+Framework stage a couple of years back. Microsoft released Windows Defender for Spyware/Adware and not Viruses, why? Probably just to be nice to their "partners" for a bit; how hard would that final step have been? But it had to come eventually.

    I have no sympathy for Symantec/McAffee/et al. Their products suck (Symantec I'm talking to you here!). One day no one will remember their names, and it will be wonderous.

    Meanwhile, I'm writing this on an OS with no need of anti-virus. Thankyou free software people!

  131. Anti virus from MS = Trojan by mahadiga · · Score: 1

    Open source software vendors promote competition in the ecosystem.
    Closed source software vendors promote collusion in the ecosystem.

    --
    I'd like to buy homeland for our 10 million people. http://twitter.com/mahadiga
  132. It is even worse by mahadiga · · Score: 1

    Imagine a hacker finding a loop hole in a Microsoft product being used by a bank.
    This hacker can siphon off our money by the time Microsoft detects and releases the patch for this loophole.

    --
    I'd like to buy homeland for our 10 million people. http://twitter.com/mahadiga
  133. Be wise by mahadiga · · Score: 1

    If you want to tell people the truth, make them laugh, otherwise they'll kill you. --Oscar Wilde

    --
    I'd like to buy homeland for our 10 million people. http://twitter.com/mahadiga
  134. Remember MS-DOS and it's "Free Anti-Virus"? by donak · · Score: 1

    I'm sure I'm not alone in remembering MS-DOS's Anti-Virus product, CentrePoint software acquired by MS when it bought the company (if I recall correctly).
    The very first message it delivered on starting was "the definitions are out of date" and you could get new one's by subscribing ...

    It was pretty much totally useless ... but it was "free"

    --
    Don't blame me, it's usually 2 in the morning when I post ...
  135. Getting better. by DaVince21 · · Score: 1

    It's a good thing that Microsoft is trying to secure its software in a manner that doesn't involve blocking the user of doing anything advanced on their PCs, at least. Let's hope that this harsh free competition will make the current commercial antivirus products a bit better, too.

    --
    I am not devoid of humor.