HELP - my boss won't pay for anti-virus software!

[null]

...

Yes, that is what I had hoped to say.
...
I think you're right the points you make. I think it is right to use
anti-virus software in the workplace. But I also think it's probably more
wise to strip executable attachments from email, and have a firewall.

If you think that's all there is to it, you have much to learn. Too
many people use IE with activex and scripting enabled, for one thing.
They don't keep up with critical patches for their OS or for IE. Not
to mention the fact that many known vulnerabilities haven't been
fixed.

don't think it's fair to blame the general PC user, at home, or at work.

There's plenty of blame to go around. The primary blame, of course, is
on the authors and spreaders of malware. Next in line comes M$ for
continually releasing operating systems and apps which are unsafe for
typical users to put on the internet. Under the circumstances, it's
very important that end users take responsibility for their own
security and that of the internet. If they don't, they share in the
blame. Typical end users should definitely be using realtime antivirus
software and at least a freeware software firewall. It's not the best
protection .... far from it .... but it's far better than nothing.
It's "mission impossible" to get the majority of typical users to
practice "safe hex" and use saner internet applications than what M$
provides.

Microsoft is, or will be adding some security features in service pack 2 for
windows XP, that can only be a good thing -- we will have to see how it work
out but the idea is, I think, the right one.

If I thought M$ has a clue, I'd agree with you. But I don't. Whatever
they release will doubtless be another endless mess of vulnerabilities
and patches. I'm sticking with the Win 9x/ME series which I know how
to harden. And I'll continue to be free of malware and spyware without
using realtime av or a firewall.


Art
http://www.epix.net/~artnpeg