Microsoft Discusses Anti-Spyware Plans 291
LaughingCoder writes "Microsoft has announced their plans for the (currently free) AntiSpyware application, which is now in Beta. It is currently slotted to be bundled with Windows Vista. The end-user has the option of switching it out and using a different vendor's spyware protection if they want." From the article: "Microsoft gave an official name to its software for protecting computer users against spyware. The software, which has been known as Windows AntiSpyware Beta 1, will be called Windows Defender when the finished version becomes available next year, a Microsoft spokesperson said Tuesday. A posting on Microsoft's TechNet Web blog announced the change on Friday and also revealed some details about capabilities coming to the software. The current version of Windows AntiSpyware Beta 1 has 18 million users, the spokesperson said. "
can Microsoft do this? (Score:3, Interesting)
Okay, a couple of thoughts:
And I know some claim this isn't Microsoft's fault that spyware happens, but it really mostly is. They designed Windows to be as easy and automatic to use as possible, which really is the gateway for much of the malware wreaking computer havoc.
If I were a anti-spyware vendor, I'd be pissed. (Unless I was the one Microsoft bought out.)
Re:can Microsoft do this? (Score:2, Interesting)
Worse: consumers are left having to trust Microsoft that spyware has not been installed. Microsoft could define as spyware any competitive software or technology it feels threatened by, and it could define as non-spyware its own or partners' software which most reasona
Re:can Microsoft do this? (Score:4, Informative)
But I don't think Microsoft would like it.
Re:can Microsoft do this? (Score:3, Insightful)
Re:can Microsoft do this? (Score:3, Insightful)
Re:can Microsoft do this? (Score:5, Insightful)
It'd be better to build it so it didn't leak in the first place.
Which ships do, in effect (Score:5, Interesting)
Re:can Microsoft do this? (Score:2)
MFUD - Microsoft Fear, Uncertainty and Doubt (Score:5, Insightful)
Re:can Microsoft do this? (Score:2)
As a consumer I'd be pissed if Microsoft did nothing about malware. I want them to either fix the core problem(s) or bundle a free desktop app as a workaround.
It seems like this is a total win for consumers. Sorry, screw anti-spyware vendors. Not all markets were meant to last.
Re:can Microsoft do this? (Score:2, Informative)
Re:can Microsoft do this? (Score:5, Insightful)
That's just plain wrong. I'm a Linux user and I'm no Microsoft fan but to be fair, spyware isn't Microsoft's fault. If a malicious programmer wants to write a program to say, monitor your keystrokes, or send your computer ads, and a user willingly installs it, there's really nothing Microsoft can do to stop it short of prohibiting the user from running any and all programs.
Re:can Microsoft do this? (Score:5, Insightful)
No, it isn't. While Spyware has used "drive-by-downloads" and other Windows flaws to install itself in the past, today's spyware is almost universally bundled with software that the user downloads and installs. Web toolbars, screensavers, background utilities, file sharing products, and other shareware is frequently loaded with spyware.
Spyware can be written for any platform. What's to stop spware from modifying your
Add to that the fact that most software is installed as root, and there is no limit to the damage that spyware-infected software could do. Even your Kernel and bootloader aren't safe.
Spyware is a problem that can affect any platform. While some spyware is undoubtably based on Windows flaws, spyware bundled with software can affect any platform.
Re:can Microsoft do this? (Score:3, Insightful)
A final point would be that I ran my computer for six months this year with XP SP2 and a permanent internet connection. I had no antispyware software installed. When I finally remembered, both Microsoft AntiSpyware and Ad-Aware came up blank.
'Spose I should point out that I've been using FireFox.
Re:Close your eyes and follow Linux (Score:3)
Re:Close your eyes and follow Linux (Score:2)
I couldn’t agree more on the automatic transmission thing. People driving a stick tend to pay more attention to what’s going on around them and use less fuel to boot. In addition to that, I doubt this nation would be overrun with six ton jacked up station wagons if those ignorant monkeyjugglers had to juggle a cell phone and a gear shift while drifting across
Re:Close your eyes and follow Linux (Score:2)
Re:Close your eyes and follow Linux (Score:2)
Step 3: Darwin!
Re:Close your eyes and follow Linux (Score:2)
Re:Close your eyes and follow Linux (Score:2)
Re:Close your eyes and follow Linux (Score:2)
Re:Close your eyes and follow Linux (Score:2)
Re:Close your eyes and follow Linux (Score:4, Informative)
But all joking aside there's a problem affecting every security measure Microsoft has established: If there is any hole in this system (by definition there are at least several) it will likely be exploited and since the vast majority of Vista users will rely on this software we'll end up with another massive breakdown. That's just what happens if everyone relies on the same software vendor for the OS, browser, mail-client, anti-spyware...
And your point is...? (Score:5, Insightful)
The next time you're sarcastic, please try to make a point of it. I admire the Windows user interface (well, most of it - some things i can't stand, like that stupid online registration), it's just that their security COMPLETELY SUCKS and their closed source + monopoly just makes things worse and very hard to maintain.
It's microsoft's fault their crappy OS is so open to spyware (*cough* IE, ActiveX, poor security scheme, services enabled by default, etc. etc), so, yes, MS should PAY to keep the OS we spent $200 on, clean. IMO Microsoft should pay us so we can purchase *ANY* antispyware, not necessarily theirs.
Re:Close your eyes and follow Linux (Score:2)
Similar in usage to "What a maroon!*"
*not to be confused with maricon.
Re:Close your eyes and follow Linux (Score:2)
I'm sorry, I must have missed that decade where some other company reached the market penetration of Microsoft. You could argue that BeOS is the most secure OS in the world because it has never been hacker or infected. But then again, there are what, 5 people using it? (Not to rag on Be, it was a great project)
-Rick
Re: (Score:2)
Re:can Microsoft do this? (Score:2)
Re:can Microsoft do this? (Score:2)
Home, Non upgrade, $192.99 [tigerdirect.com]
Home, Upgrade, $98.99 [tigerdirect.com]
Re:can Microsoft do this? (Score:2)
Re:can Microsoft do this? (Score:2, Informative)
Re:can Microsoft do this? (Score:3, Insightful)
Really? are you planning on visiting anytime soon?
A busted window, while quite the nice irony, has no bearing here. If Ford released a car that *any* key would open and start then you'd have a comparison.
First Point - now, that 'free' system to stop people from exploiting a basic security flaw would be a realistic comparison. And since they built the flawed system, selling or giving away free something others sell to fix THEIR flawed system is very thin legal ice. Fix
Alternatively... (Score:3, Interesting)
Re:Alternatively... (Score:3, Insightful)
As to the phoning home part, IPFW doesn’t, as configured in OS X, do egress. I run a $25 app [obdev.at] to have real time veto power over outgoing packets. So while the malware situation on OS X is currently infinitely better than that of Winders, I wo
Personal Responsibility (Score:2)
Yes it is trivial, but so is writing your password on sticky notes on your monitor. If you are given the choice of installing the software with a notification of the OS and prompted for a password then it is clearly the fault of the user for typing it in. Hen
Re:Personal Responsibility (Score:2)
That statement of mine was directed at my fellow Mac users who tend to feel that we are immune from these problems. It could be said that we have a *much* stronger immune system, but we are not actually invulnerable. And a false sense of security and/or bravado amongst our numbers will not do us any good.
In other words, I agree with you completely.
Re:Alternatively... (Score:2)
2. Require user to run installer to run program, as happens on occasion with Mac OS X software
3. Prompt user for their password in installer, as often happens with installers
4. Pollute user's Mac with spyware that phones home constantly over port 80
5. Profit!
Re:Alternatively... (Score:5, Insightful)
Do not make the mistake of believing that your platform is immune.
Spyware works on any platform because users are stupid. Almost any user will gladly reveal their administrator password if promised "free screensavers". At that point, all of the access control in the world won't help you.
No operating system that allows the user to take control of their system is immune from spyware. There are always users who will give spyware whatever permissions it needs to install.
Re:Alternatively... (Score:5, Funny)
I don't have a problem with that.
Crazy question (Score:5, Interesting)
Aren't they gonna implement a secure user-privilege levels?
Even if someone does mess up their own home directory, they won't be able to touch system files?
So theoretically one could log in as an admin and easily remove the unwanted warez.
Or is Vista going to be more of the same when it comes to file permissions?
Re:Crazy question (Score:5, Insightful)
Spyware doesn't necessarily need to modify system files to spy on users. The information in your home directory is the most valuable.
So theoretically one could log in as an admin and easily remove the unwanted warez.
Sure, but most Windows users don't even know they have spyware. That problem needs to be solved first.
Re:Crazy question (Score:2)
Well, if Windows was not able to get spyware then Windows users would not have any spyware to know about.
Re:Crazy question (Score:2)
Spyware doesn't necessarily need to modify system files to spy on users. The information in your home directory is the most valuable.
Right, but most people don't keep items in their homedirectory worth spying on. Most spyware programs don't search your system for xls files or docs for credit card number because it would provide nothing but useless information for the phisers to sort through, but it is when they highjack the browser and then OS to keylog to get your personal banking informa
Re:Crazy question (Score:2)
Yea Right (Score:4, Insightful)
Kind of like how XP SP2 didn't recognize Norton Anti-Virus as a anti-virus software and warned you that you didn't have any anti-virus software installed? Symantec had a patch that disabled this warning right after XP SP2 came out.
Re:Yea Right (Score:2)
The real problem here is with Symantec, whose autoupdater often fails. Using even the corporate edition (versions 7 through 9) I often found that even kicking off an update manually would fail to re
Re:Yea Right (Score:2)
Umm, I'm not talking about an "old" version. I'm talking about NAV 2004 (and this was in 2004 when XP SP2 came out). Perhaps the "current" version of NAV didn't follow Window's security center API but I find that hard to believe.
Re:Yea Right (Score:2)
Re:Yea Right (Score:2)
Wow, thank you for that very enlightening comment. According to your theory:
And this is not Microsoft's fault (going by your theory)? If they're going to change their APIs they need to have some backwards compatibility.
Re:Yea Right (Score:2)
Actually, yes it did, at least the patch I'm talking about. There may have been one later that did what you are saying. And yes I know I could have just disabled it myself very easily but it didn't really bother me.
An "engineering change"? (Score:5, Funny)
Making the engineering change from "Windows AntiSpyware" to "Windows Defender" took a lot of careful coordination across our team to ensure that the strings in the UI got changed, the help files all got updated, registry keys, file names and properties, as well as a couple of images all got changed.
You keep using that word. I do not think it means what you think it means.
Re:An "engineering change"? (Score:5, Funny)
Plans!? (Score:2, Funny)
Can this program do it ALL? (Score:5, Insightful)
I've had Adaware detect things Spybot doesn't, Spybot detect things Adaware doesn't detect, MS's program detect things Spybot doesn't detect, etc etc etc...
My usual course of action to thoroughly cleanse a system is to boot to safe mode, run adaware > spybot > MS antispyware > HijackThis
My question is... will there ever be a program that can detect it all? Becuase so far, I haven't found one.
tried Foxie? (Score:2)
Re:Can this program do it ALL? (Score:2)
While I cant say "ever" because well, that would be a pretty strong statement I have to defend, it seems feasible that one product will catch something another product doesnt. Maybe a patch/upgrade/definition came out for MS's before Adawares, or the spyware knows how to bypass SpyBot, but not hijackthis, etc.
So in the near forseable future...no.
Re:Can this program do it ALL? (Score:2)
No because (Score:2)
A) Never go on the internet, ever.
B) Use an OS other than Windows.
C) Try and get MS to improve Windows so that spyware has limited impact(good luck there)
Nope. (Score:2)
Theorically impossible. (Score:2)
If suddenly such an überantispyware appeard, that can detect everything better than anyone else, it'll suddenly become "teh new target" that every spyware-writer will try to circumvent. And with so much effort put on this, of course there will be new spyware that won't be detected by it.
Historically the same has been seen with anti-virus software
- When Thunder Byte AntiVirus [knoware.nl] was out, it was THE holy grail of anti virus. It had a heuristic (simulator) engine, whereas other
Re:Can this program do it ALL? (Score:2)
It might make Windows more stable (Score:5, Insightful)
Microsoft might remove spyware apps that break Windos, but is their goal to really remove anything that can spy on you, this being the company that's introduced Microsoft Genuine Advantage?
Re:It might make Windows more stable (Score:3, Insightful)
Due to their policies for threat levels, according to Microsoft themselves:
Microsoft Downgrades Claria Adware Detections [slashdot.org]
Funny it coincided a bit too well with the acquisition rumors of Claria.
And that was discussed before this was found out.
However, before anyone brings it up, I think this was found out to be simply a fake screenshot:
Microsoft AntiSpyware thinks Firefox is Spyware [slashdot.org]
Modify SetWindowsHookEx (Score:2, Interesting)
It will probably break alot of code, but one kind of spyware instantly disappears.
Also, global CBT hooks are probably a bad idea to have around (who uses them for CBT purposes anyway? THAT concept has long since vanished and the things were hacked into a plethora of other uses).
Re:Modify SetWindowsHookEx (Score:3, Insightful)
I understand that (Score:4, Funny)
Trademark Problems? (Score:4, Informative)
Re:Trademark Problems? (Score:3, Funny)
Windows Goggle.
-/It does nothing.
More court time needed (Score:2)
Its a bit tricky, because, hell, its MS's OS, why can't they give extra value software? Well, maybe so, but they are so large that
Re:More court time needed (Score:2)
That sounds a lot more like good old fashioned capitalistic competition to me. If you start losing customers to another vendor (Apple) because their product is better, you improve upon your own product to retain your customer base.
That said, you can fault apple for doing the same thing by bundling a Mail app, a calendar app, a movie editing app, a photo app, a music app, a development environment, etc.....
Re:More court time needed (Score:2, Insightful)
How original... (Score:2)
Re:How original... (Score:2)
The interface is wonderful! (Score:5, Funny)
Already been done (Score:2)
Keep it free. (Score:4, Interesting)
However, it would be horable for our economy. As they start to give away anti-virus/spy-ware software, that eliminates a multibillion dollar industry. That is a problem, but not MS's problem. Its a free market issue, and the market will adjust.
As far as it being- an anti-trust issue, I don't believe it is. This is a tool that fixes/protects against exploits in their software. They aren't adding a product from an unrelated market (e.g. web browser or media player). This is a logical step, similar to service packs and updates. The fact is if they didn't offer updates, a company would emerge that patches windows, just like the virus industry emerged.
All in all I tihnk this is a good thing for windows users. I think the anti-ms crowd is going to throw a fit, and wrongfully claim abuse of monopoly, but what can ya do? MS is making the correct decision to include it in Vista. If they charge extra for it, or turn it into a paid subscription service, that is an entirely new issue. That would be a conflict of issue, and morally wrong, maybe not legally, but it would hurt their business.
Re:Keep it free. (Score:3, Informative)
As far as it being- an anti-trust issue, I don't believe it is. This is a tool that fixes/protects against exploits in their software. They aren't adding a product from an unrelated market (e.g. web browser or media player). This is a logical step, similar to service packs and updates. The fact is if they didn't offer updates, a company would emerge that patches windows, just like the virus industry emerged.
I disagree completely. Markets are defined by products and the flow of money, not by how technolo
Re:Keep it free. (Score:2, Informative)
fallacy of the broken window.
If what you said was really true, we should be paying people to write worms and viruses because it creates all that business when in fact it just diverts resources from more productive things.
Merlin
Just engineer the software properly in first place (Score:2, Insightful)
Ring 0: kernel level
Ring 1: apps level
Ring 2: user level
There's no excuse for outsiders having install level capabilities on any OS.
MS did this with NT 3.5[1] (Score:2)
Ring 0: kernel level
Ring 1: apps level
Ring 2: user level
Microsoft did something similar to this with NT 3.5/3.51, and these releases were quite robust.
However, for NT 4.0 they moved the display drivers and GUI to ring 0 to increase performance. This created huge stability issues as buggy display drivers (and coincidentally a sub-optimal IP stack) caused NT 4.0 systems to be extremely fragile. The anticipated performance increases were eclipsed by downtime caused by reboots and BSODs. Some of t
Re:Just engineer the software properly in first pl (Score:2)
However, at home (where a lot of these infested boxes are), users need SOME means of installing software.
I may be overly suspicious here (Score:2, Insightful)
An example of typical Microsoft quality: (Score:4, Funny)
Somehow Slashdot has no problem, however.
How Microsoft got the name... (Score:5, Informative)
Thank You Sir, May I have another!? (Score:3, Insightful)
Re:Thank You Sir, May I have another!? (Score:5, Informative)
Re:Thank You Sir, May I have another!? (Score:2)
OS design... (Score:3)
the same thing it once did in the browser sector (Score:2, Insightful)
In my opinion, the main thing following from the words of Microsoft specialists in the blog, is not the change of name but the fact that the software giant, I think, is about to do the same thing it once did in the browser sector.
"The engine is now moved to a system service ..." means that anti-malware (anti-virus) solution will be built-in in the next Windows. Why I call it anti-virus? Because like some time before the word "virus" was used for almost ALL malicious programs, now they are trying to call t
MAS actually works, but shouldn't be needed (Score:3, Interesting)
While Microsoft AntiSpyware wasn't a catch-all (neither were the other two programs I used in conjunction with it,) it worked out well. Whereas Ad-aware would give you a long listing of individual files with sometimes-useful information if you double clicked on an item, MAS would list the various programs (clumping the files together) and give a threat level, the main things they do (both good and bad) and a few other small tidbits. It's enough information that a regular user would be able to figure out what to do without being overwhelmed.
I have it on my own Windows machines (though I almost never have to run it myself.)
However, as has been pointed out, this shouldn't be shipping with Vista. With Linux coming to the forelight, and Macs becoming cheaper, Microsoft should know that they can't do the "There are only 1000 holes instead of 5000, it will be fine" thing they've loved to do in the past. Vista should be secure enough to not need this kind of thing, or it just shows that Microsoft would prefer to pretty up the OS some more and give us the same crap in a different box for another $300 than to actually strive ahead.
Then again, that's nothing new.
We get it. They should make the OS better. (Score:2)
Still, I'm already sick of reading people's comments about how they should just design their OS better. Of course there are things they can (and hopefully will) do to reduce the risk of malware. Ditching default root privelidges comes to mind.
End users are still going to compromise themselves, though, with software installs and stuff. Let's face it, as long as Windows is the big target, it will
Oh yes, and Linux is free from all evil (Score:2)
Re:Oh yes, and Linux is free from all evil (Score:2)
If your OS can tell you that you have a rootkit installed, it's pretty much not a rootkit. Not a very thorough one, anyway.
Re:Lies (Score:3, Informative)
That tool shoudn't have "bug"'d you anyway. A new version of the "Malicious Software Removal Tool" you speak of is installed and run by Windows Update periodically (monthly?) to simply check once for Blaster and other viruses (not necessarily spyware, and vice versa, I'm sure). That just runs
Re:Wow the real beta... (Score:2)
Re:Another app... (Score:2)
Re:Rewrite (Score:3, Insightful)
They've already done that once when they started the plan to move everyone from '9x to an OS in the NT family. Look how well that worked.
Re:Rewrite (Score:3, Funny)
Re:Rewrite (Score:2)
ScriptKid,Virus,Worm != Spyware (no bugs exploits) (Score:3, Insightful)
- Virus are maliciouse software that exploits bugs to enter into your computer (without the user knowing it or even without the user doing whatever), then try to gain full control over the PC (gaining root access. Which is easier in crappy OS that run at administrator privilege), then propagate by sending themself over the network (and abusing further bugs on these computers).
- Spyware are softwares that come *with* some other installer, and being installed follow