Detects "Microsoft Windows Operating System" ???

[plun]

I'm in favor of competition. I'd be pleased to see Microsoft Antispyware
extended to include Firefox coverage, not that I think it likely, for a
number of reasons. That doesn't change the issues of vulnerability response
and patching mechanisms, though.

I was impressed to see that they've tweaked the Genuine Windows validation
process to make it possible via Firefox.

Yes, anti trust regulators hunting them. DOJ and EU.

Really good.

Interesting article about this:
http://story.news.yahoo.com/news?tm.../nm/20050217/tc_nm/tech_microsoft_security_dc

--

 

[A McGuire]

Yes, I love competition. I think their market sharing decreasing from 98%
to 93% has got them worried - thus XP SP2 and IE 7.0. I'm glad to see the
new focus on security.

 

[Bill Sanderson]

Yes--I think some issues folks are hot about in this beta or with this
product relate very much to legal issues.

My take on the consumer level app due out before the end of the year is that
it may be a rather different application from the tradition definitions
based antivirus we are accustomed to. The better vendors have heuristics,
and that helps, but I suspect there's room for some innovation here, and I'm
hoping to see it.

I've certainly liked what they've done with the antivirus technology
already--the monthly targeted scans going after high-profile viruses--quick
enough and footprintless enough to not cause much of a strain on folks, but
very effective, I suspect.

 

[Snack]

A McGuire wrote:

"done with you"

So you patch Firefox via the sneakernet? Do you walk to every workstation?
Or do your users use IE? What is the centralized management plan for
Mozilla products? I haven't heard of one yet - you'll have to get something
like SMS or anther central management solution, unless you want to continue
walking to every workstation.

As I've noted Mozilla has a built in updater and that we use IE. And yes
in an Windows based enterprise where Windows update and SUS don't cut it
you could distribute updates & patches via SMS.

 

[Snack]

Firefox has very little market share - it's relatively easy to reach 25
million users by just posting an update on their site and waiting for
Googlers to trip across it. MS has many more products to keep updated -
hundreds if not thousands. The scope of their patching mechanisms is much
more advanced. The second Tuesday of every month is Patch Tuesday - it's
not very systematic and easy to roll out updates with the likes of
SMS/WUS/SUS - you choose depending on your organization.

We're completely up to date via SMS, McAfee AV is handled by EPO.
Yet we're still completely hammered with Spyware.

Firefox still has vulnerabilities that I've noted that are unpatched. Go to
US-CERT, and you fill find an additional Firefox exploit for this month -
this time rated Medium - no fix.

What's the Spyware situation with Firefox? This is a SPYWARE forum FYI.

And you're Jim Jones mind set is mind boggling. You point us to CERT the
very orginization that multiple times has recommended dumping Internet
Explore to increase security. Windows is and always has been the single
must vulnerable OS ever iregardless of market share, there's no dancing
around it.

 

[Snack]

I'm in favor of competition. I'd be pleased to see Microsoft Antispyware
extended to include Firefox coverage, not that I think it likely, for a
number of reasons.

Not to be rude but the reasons would be that Spyware does not exist in
Firefox. You *cannot* change the homepage, you cannot install
unrequested programs, you do not have the inherent issues that IE and
Windows have. See CERTs note on the core issues (posted above) that are
Microsofts bane in regard to security. Until those components
fundamentally change IE/Windows will always be in a security battle.
Other browsers and OS'es have a 100mile head start simply because they
do not have these inherent issues that have dogged Windows for a long time.

That doesn't change the issues of vulnerability response
and patching mechanisms, though.

The mechanisms and responses will definitely be something to keep an eye
on. Also extensions.

I was impressed to see that they've tweaked the Genuine Windows validation
process to make it possible via Firefox.

Firefox is just months old... lets hope it matures well.

 

[Snack]

Yes--I think some issues folks are hot about in this beta or with this
product relate very much to legal issues.

My take on the consumer level app due out before the end of the year is that
it may be a rather different application from the tradition definitions
based antivirus we are accustomed to. The better vendors have heuristics,
and that helps, but I suspect there's room for some innovation here, and I'm
hoping to see it.

My take for a long time was Anti Virus was the virus Norton McAfee et
al always caused me more problems than any virus ever had. Then in the
last five years that shifted for those that use Exchange and Anti Virus
became a lifesaver for the enterprise and home user of Microsoft
products and AV was mature enough to handle the call to duty.
But Now with Spy/Adware and more intelligent viri I'm seeing AV products
become a problem again as they venture into new terrirtory. Incorrect
files deleted or inoculated, scripts blocked, SMS issues etc. No fun at all!

I've certainly liked what they've done with the antivirus technology
already--the monthly targeted scans going after high-profile viruses--quick
enough and footprintless enough to not cause much of a strain on folks, but
very effective, I suspect.

I can't wait to see it, surely can't be any worse than McAfee!

 

[Snack]

Yes, I love competition. I think their market sharing decreasing from 98%
to 93% has got them worried - thus XP SP2 and IE 7.0. I'm glad to see the
new focus on security.

As someone who has been supporting Windows since 3.0 I've seen about
8,000 "new focus on security" or "the most secure version ever"
campaigns from MS, still waiting........

SP2 is good, a band aid but that's what we need right now. IE7 tells me
there are paying attention. perhaps with revenue streams looking bleak
for MS. Linux & OSX looking hot and a peep back from the old browsers
wars MS might actually have to back up the talk this time around.

 

[A McGuire]

I agree - but I think this time around MS finally realizes the impact that
security, or lackthereof, will do if they don't address it. Buying Giant
and that other AV company makes me feel that they have a sense of urgency,
otherwise they would have taken the time to write their own from scratch.
Giddy up!

 

[A McGuire]

Agreed - unless they lose market share. It's trivial as to why people
target it - because they can cause the most damage and get their publicity.

 

[A McGuire]

I guess my only reply is that I personally have no issues with IE.

On to read more about the MSAS program. I have issues there, not with my IE
;-)

 

[Snack]

I guess my only reply is that I personally have no issues with IE.

If you have no issues with IE then you have no need for MSAS.

 

[Snack]

Agreed - unless they lose market share. It's trivial as to why people
target it - because they can cause the most damage and get their publicity.

Market share is a part of it but at some point in your computing life
you will need to take off the blinders and examine the facts.

Take 5 bank CEOs and ask them which of the following personal desktop
computers they would trust to protect all the personal information of
all their customers for one year. Assume all computers are default
setups with latest OS/Kernel and are fully patched.

- Windows
- Mac OSX
- Linux
- Unix

Online websites for the US's top 5 banks should shed some light if you
don't already know the answer...
1- Citibank: Solaris
2- Jpmorganchase: Solaris
3- Bankofamerica: Solaris 8
4- Wachovia: Solaris 9
5- Wellsfargo: Solaris 8

 

[A McGuire]

MSAS goes much deeper than IE. So is all AntiSpyware for IE? Boy... you
don't give up.

 

[A McGuire]

That is fine - ask me. I do my finances on Windows, and also was a senior
DBA/Webmaster for a third-party billing company that also had an entire MS
shop. I had no issues, not even with IIS 4.0 facing the Internet.

Believe me, we can go around and circles forever - I will never give up my
attitude, and you won't either. Let's agree to disagree and move on.

 

[Snack]

MSAS goes much deeper than IE. So is all AntiSpyware for IE?

Yes. Without Windows + IE there is no Spyware, it's just that simple.

 

[A McGuire]

Doubt it.

--
A McGuire

Yes. Without Windows + IE there is no Spyware, it's just that simple.

 

[A McGuire]

PS. Maybe you should go with dumb terminals again then ;-)

I would have for my users to be happy - I don't find solutions for myself, I
find them for my end users. I think you are forgetting about them.
Remember, most of them aren't IT savvy. Go ahead, put them on Solaris!

 

[Snack]

PS. Maybe you should go with dumb terminals again then ;-)

I would have for my users to be happy - I don't find solutions for myself, I
find them for my end users. I think you are forgetting about them.

Um hello you forgot about them with "everything is running fine for
me!". Perhaps your unaware that whole world isn't running XP, SP2, a
firewall ad naseum. Talk to your neighbors, you could start a side
business removing Spyware, unless of course they use netscape/Mozilla or
Macintosh then they'll be like, what aer you talking about?

Remember, most of them aren't IT savvy. Go ahead, put them on Solaris!

To bump your short term memory the discussion is spyware. Firefox is a
spot on 100% solution to Spyware. Bonus = Users love it.

 

[A McGuire]

"Talk to your neighbors, you could start a side business removing Spyware"

I'm actually planning on it. Windows isn't going away anytime soon - I
suppose you would say "unfortunately".

I graduate with my Masters in CIS in five weeks - time to move on.