Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror
×
Bug Technology

Botched Security Update Cripples Thousands of Computers 274

girlmad writes "Thousands of PCs have been crippled by a faulty update from security vendor Malwarebytes that marked legitimate system files as malware code. The update definition meant Malwarebytes' software treated essential Windows.dll and .exe files as malware, stopping them running and thus knocking IT systems and PCs offline, leaving lots of unhappy users and one firm with 80% of its servers offline."
This discussion has been archived. No new comments can be posted.

Botched Security Update Cripples Thousands of Computers

Comments Filter:
  • Re:Production (Score:5, Informative)

    by gweihir ( 88907 ) on Thursday April 18, 2013 @12:47AM (#43479805)

    AV software (or rather its definition files) has to be updated very fast if it is to have any value at all. You cannot qualify it for production, that takes too long. This is one reason the whole concept is fundamentally flawed, because it is still too slow.

  • by ozmanjusri ( 601766 ) <aussie_bob@hotmail . c om> on Thursday April 18, 2013 @12:50AM (#43479819) Journal

    MSE is highly praised by Slashdotters.

    Only by those who don't pay attention to current reviews. Like many recent Microsoft products, MSE started off well, but has been in steady decline since its release.

  • by UltraZelda64 ( 2309504 ) on Thursday April 18, 2013 @12:56AM (#43479839)

    Meh, who wants to keep checking the anti-virus reviews all the time and constantly switching, tossing money out here and there? These programs have the ability to cause enough problems on their own, and their effectiveness at "catching" things changes with the weather. You're better off just picking one and sticking with it, avoiding all the extra headaches. In the end, they're all pretty questionable (I wouldn't trust any of them over good old common sense), so you might as well get the one developed by the same people who make the OS to prevent any stupid little problems like what TFA is about. It just happens to be a nice bonus that Microsoft's product is free (well, beyond the Windows license fee at least...). IMO most of the "anti-virus industry" is just a bunch of whiny crooks themselves, and neither they or their software can really be trusted much more than the malware they claim to be fighting.

  • by Dahamma ( 304068 ) on Thursday April 18, 2013 @01:06AM (#43479879)

    The problem is the solutions that may do a bit better catching the 0-day malware are also the ones that are so heavyweight they noticeably affect the performance of your system. There is a tradeoff at some point between resource usage and coverage. One thing MSE definitely has going for it is it doesn't badly degrade performance like McAfee, Norton, recent AVG, etc do.

  • by oldlurker ( 2502506 ) on Thursday April 18, 2013 @02:02AM (#43480051)

    Of course you can not produce unbiased reviews that actually say this...

    Actually, the leading security software reviewer site, AV-Test, gave MSE a bad review in the last round, they did not pass "AV-Test certification".

  • by oldlurker ( 2502506 ) on Thursday April 18, 2013 @02:07AM (#43480059)

    NO, it hasn't been getting bad reviews, it has had some negative press based on some dodgy tests that try to use essentials for something it isn't really meant for. They throw zero day malware to test its heuristics, which are not wonderful. however in known malware (the stuff 99.9% of people need protection against) it is exceptionally good.

    This is considered the leading AV review site in the world, not achieving their "certification" (the icon in the third column) in test is certainly a bad review, most well known security software manage to exceed that threshold. MSE didn't in the last two tests.

    http://www.av-test.org/en/tests/test-reports/ [av-test.org]

  • by Anonymous Coward on Thursday April 18, 2013 @02:16AM (#43480089)
    that is possibly the most biased of all reviews and testing sites as it takes money from the top AV vendors, the part it didn't do well in is zero day stuff, the part of an AV product that matters the least as nothing is reliable enough for zero day (not even the best products). The fact that AV-Test puts such significance on that part of their test really calls their whole process into question.i.e. DON'T trust them.
  • by Khyber ( 864651 ) <techkitsune@gmail.com> on Thursday April 18, 2013 @02:25AM (#43480113) Homepage Journal

    AV-Test is bullshit shill-paid, like almost every site out there.

    MSE here, have run it since XP. Not one damned problem.

  • by Joce640k ( 829181 ) on Thursday April 18, 2013 @03:43AM (#43480333) Homepage

    Right, and it's what I use and recommend.

    Which begs the question: why do I have to install it? Why doesn't it ship with?

    Anti-trust laws.

    PS: It doesn't beg anything, it raises a question.

  • by Anonymous Coward on Thursday April 18, 2013 @06:00AM (#43480833)

    From the "article"

    Disclosure
    Symantec Corporation funded the production of this report, selected the test metrics and list of products to
    include in this report, and supplied some of the test scripts used for the tests.

    Hmm...

Today is a good day for information-gathering. Read someone else's mail file.

Working...