Slashdot Mirror
Microsoft Looks To Courts For Botnet Takedowns
angry tapir writes "Microsoft has seen a dramatic drop in the number of computers infected with Waledac, a piece of malicious software affiliated with a botnet that was once responsible for a massive amount of spam. In the second quarter of this year, the company cleaned only 29,816 computers infected with Waledac, down from 83,580 computers in the first quarter of the year. The drop in the number of infected machines shows the success of the legal action Microsoft took earlier in the year, according to the company."
The courts are not going to make the software secure.
Help stamp out iliturcy.
So Microsoft has found that using lawyers and courts is a more effective way for them to combat malware and botnets than building good security into their products.
Why am I not surprised?
On a related matter, I am starting to see more reports of the possibility of malware in the Linux ecosystem. So far it is mostly a matter of an increase in security patches for Ubuntu and Debian apps, to fix vulnerabilities that no one has managed as yet to exploit to any significant degree. So its not really an issue, simply a minor annoyance that I've been saying okay to more automated updates in the last month or so than I was seeing this time last year.
Will
...Courts look for Botnets to take down Microsoft.
Now, if you'll excuse me, I have backups to corrupt.
While few would defend botnets, this legal technique will certainly be applied to other types of domains-- p2p, freenet, proxy, dissident, and whistleblower sites. In fact, I predict such attacks will hurt wikileaks and p2p sites more easily than botnets, because botnets don't have to have a small number of memorable domain names (they're not directly controlled by random humans). Ultimately, all of these "undesirable" types of programs/sites will work around the DNS crackdowns. But this will give even more of an edge to those who already hold nearly all the power-- corporations and governments. Really, they seem to be saying that if your domain could be used for something illegal, it can be taken away from you via rubber stamp before it's even involved.
I'm kind of surprised Microsoft would say something like this, but at the same time, I'm really not. I guess they are looking at it through the eyes of George Washington and not the consumer, that's why they'll just sue people into compliance. But what's going to happen when they can't sue people because malware propagates itself far more quickly than Microsoft can detect its origin? Why not take the initiative and build more secure products instead of dealing with the problem after Conficker 2 is already globally widespread,
So hopefully, they will pass to remove all malicious and infected machines from the internet forever, and i'm sure it wouldn't take much to get the Evil Microsoft infected and scrubbed off...Then Unix takes over, and the internet world will find peace! eh...forget peace, but really get rid of Microsoft already!!!
Before people bleat about this being about poor MS security do remember how many dumb folks there are out there. Lots of attacks come from dumb folks using things like Bittorrent and then executing something that they really shouldn't do without having decent virus protection on their machine.
So good on Microsoft for doing this, yes they also need to clean up their security act, which they have been doing, but also coping with the dumb people who buy their products is a decent thing to do.
An Eye for an Eye will make the whole world blind - Gandhi
I don't know if it's the story or the report that's full of holes, but this makes no causal sense whatsoever.
Notwithstanding the basic "correlation does not equal causality" tenet, where is the connection between the forcible shutting-down of botnet-controlling domains, and the botnets themselves? A p2p-vectored botnet's growth has nothing to do with the purposes for which that botnet is employed.
Furthermore, stating that "the company cleaned fewer machines" is not equivalent to stating "their are fewer machines infected." Frankly I'm not going to trawl through MS's Biannual Security Report or whatever (and thanks for not linking it, pcworld), but either the report or the story is woefully lacking in certain key details. It might all be true, but merely saying as much isn't going to garner much karma.
Meta will eat itself
For once Microsoft is using its legal muscle for a good cause.
I'm shocked.
Even as a mainly Linux user, I completely agree with the above comments.
Software is complicated & all of it has bugs & security holes - Linux, OS X, Windows, whatever...
Microsoft's worst mistake was believing their own marketing that sent out the message that you don't have to know much about computers to be completely secure when using one - it is the same mistake Apple are currently making.
There are people out here using Windows (myself included) who don't see any viruses, trojans or rootkits on Windows because we keep patches up to date, use good virus & malware scanners, don't trust emails & attachments from people we don't know, & don't go trying to get all our software for free from torrent sites.
We use the same Windows OSes that people with infected PCs use, therefore the only thing separating the two is knowledge, experience & common sense. Period.
I don't necessarily like the fact that Microsoft is using the court system for this because then some public money will be used in the process - but something *DOES* need to be done & I'm all for people being kicked off of their Internet connections until they get off their backsides & clean their PCs.
Gentoo Linux - another day, another USE flag.
What microsoft fails to understand, is that the people operating these malware networks are not large slow monolithic corporations, just because a piece of malware which was common a few months ago is now dying out doesn't mean the problem is gone, it just means that the authors of that malware have moved on to their latest creations...
After all, why would you continue pushing an old piece of malware which has been reverse engineered and is detectable by every anti malware program out there, when you can write something new that will have a new window of opportunity before anything can detect it.
http://spamdecoy.net - free throwaway anonymous email - avoid spam!
Without reading TFA, I can imagine that Microsoft is suing on the grounds that it should have the copyright on malware. There have actually been similar patents that MS has taken out before. I wouldn't be too surprised.
There are 10 commandments: 01)Thou shalt love the Lord Thy God 10)Thou shalt love thy neighbour as thyself.Matt22:34-40