Microsoft Downgrades Claria Adware Detections

Found on eWEEK on Wednesday, 06 July 2005
Browse Software

Microsoft's Windows AntiSpyware application is no longer flagging adware products from Claria Corp. as a threat to PC users.

Less than a week after published reports of acquisition talks between Microsoft Corp. and the Redwood City, Calif.-based distributor of the controversial Gator ad-serving software, security researchers have discovered that Microsoft has quietly downgraded its Claria detections.

According to the results published by Howes, four different builds of the Windows AntiSpyware beta detected the Claria products, but the default recommendation was "ignore."

Spyware isn't bad if you own it, right? I guess that's what MS thinks, now that it's close to buy Claria.

MS partner finds MS software cheaper than Linux

Found on The Register on Sunday, 26 June 2005
Browse Software

Microsoft has bankrolled another "independent" study that happened to turn up some interesting results. Namely that Microsoft's software is less expensive to patch than open source products.

What Wipro's study doesn't show is that in November of last year, Microsoft CEO Steve Ballmer revealed multi-million dollar deals with both Wipro and Infosys - another large Indian software maker and services firm. Earlier that year, a watchdog claimed that Wipro was one of two Indian companies said to be working on parts of Microsoft's upcoming version of Windows code-named Longhorn. Microsoft denied that Indian staff were handling the core of the OS.

For the curious, Wipro found that Windows desktops cost 14 per cent less to patch than Linux desktops, that Windows servers cost 13 per cent less to patch than Linux servers and that Windows database servers cost 33 per cent less to patch than Linux database servers. The Meta Group audited the survey methodology.

"Risk is defined as the number of days between when a vulnerability was identified and when a patch was made available, combined with the amount of time it took organizations to deploy the patch. The study concludes that even when a greater number of patches are deployed for Windows, the costs are lower because it takes about half as much effort per patch to complete the task," Microsoft said.

Simply the fact that MS has to buy "independent" studies proves that Linux is better (server-wise anyway). Unless you have something really fancy running, you can define a cronjob to do your updates automatically.

Indian cracks Microsoft's anti-piracy program

Found on Rediff on Wednesday, 22 June 2005
Browse Software

An Indian researcher has breached the much-touted "impenetrable" Windows Genuine Advantage of Microsoft.

Bangalore-based Debasis Mohanty has cracked WGA through an "easy-to-exploit" weakness in the software for generating illegal copies of the Windows XP programme.

Microsoft confirmed the claims of Mohanty, but sought to downplay it saying, "It represents very little threat." A company spokesperson said they did expect counterfeiters to try a number of different methods to circumvent safeguards provided by WGA.

I'd never claim a system or software un-crackable. There can always be something you forgot. Well, ok, I'm quite sure that a "Hello World" program is pretty secure, but I still wouldn't bet on it.

The Insecurity of Security Software

Found on Slashdot on Saturday, 18 June 2005
Browse Software

BusinessWeek is reporting that, despite a number of software products meant to safeguard Windows PCs from harm, a rising number of them endanger their hosts because of poor design and flaws. From the article: 'A new Yankee Group report, to be released June 20, shows the number of vulnerabilities found in security products increasing sharply for the third straight year -- and for the first time surpassing those found in all Microsoft products.'

That's why it's important to let people test the software and expose all flaws. It's impossible to stop people from trying to exploit a software product. However, if it's not allowed to publish the bugs, they will remain unfixed. That's by far more dangerous. If you keep that in mind and look at France, where it is illegal to publish bugs found by reverse-engineering, then that makes you wonder why someone should use french software.

Enter Avalanche: P2P filesharing from Microsoft

Found on The Register on Thursday, 16 June 2005
Browse Software

Researchers at Microsoft's computer science lab in Cambridge have developed a peer-to-peer filesharing system that they say overcomes the scheduling problems associated with existing distribution protocols such as Bit Torrent.

The researchers claim download times are between 20-30 per cent faster, using their network coding approach, than on systems that only code at the server, and between 200 and 300 per cent faster than distributing un-encoded information.

Naturally, Microsoft is very keen to stress that this technology should be used for distributing legitimate content. It even put that in italics in the press material.

The basic principle of the system, dubbed Avalanche, is pretty much the same as BitTorrent. Certainly the problem it solves is: a large file needs to be distributed to many people. One server does not have the bandwidth to deal with all that traffic, so you need to find another way of getting the file to everyone who needs it.

20-30% faster download? When Bittorrent has enough sources, it will saturate a line; call me blind, but I can't see how MS could increase the maximum speed of a line by 20-30%. Anyway, I think this is just another PR bubble. Much ado about nothing. Perhaps MS really thinks Avalanche will beat Bittorrent, who knows. Just like wma has beaten mp3. Programs aren't just faster because MS made them. For example, Samba is considerably faster than Windows' file and printer services (which is even tied into the OS) on the same hardware.

IE 7 for Windows 2000 not likely

Found on The Inquirer on Wednesday, 01 June 2005
Browse Software

Software giant Microsoft has confirmed that its coming version of IE 7 will not work with Windows 2000.

Although there are still a fair number of people using Windows 2000, Vole has been gradually pulling the plug on supporting the aged operating system. However there were some who hoped that Microsoft would make IE7, which is supposed to be a lot more secure, backwardly compatible to cut down on the number of security attacks on Win2000 machines.

However according to Microsoft IE programme manager, Chris Wilson, wrote on the Internet Explorer Weblog here, IE 7 will need Windows XP Service Pack 2 (SP2) when it releases in beta. He said that some of the security work in IE7 relies XPSP2 and it is too much like hard work to port back to Windows 2000.

I don't really like those tries to push users to the new OS-releases. It might push users, but to other solutions. ICQ told me some time ago that version 2000b won't be supported anymore soon; they suggest to upgrade to ICQ5 and convert the message history with a tool they offer. Since I don't like to fill my system with useless/untested programs, I installed all on a virtual machine. The converter needed some attempts to run (it sometimes complained or just didn't start). When it finally was ready to convert my history, it told me it couldn't. Hello? A program which was only created for that purpose fails to do its job? The solution? I'm switching to Miranda. It's free, ad-free, open source, fast (starts 5-10x as fast as ICQ), supports various other protocols and can import my history perfectly.

Microsoft Demands Removal Of Longhorn Images

Found on Slashdot on Tuesday, 26 April 2005
Browse Software

After the previously reported release of the Longhorn beta at this year's WinHEC, Neowin and other Windows sites are reporting that Microsoft is going around sending legal letters demanding removal of Longhorn Build 5048 screenshots. Paul Thurrott discusses it on his site, stating that Microsoft never told anyone beforehand not to post screenshots of the publicly available beta, and links to the new galleries he has up now. 'Enjoy it while it lasts.'

Apple went after their fans because of "leaked information"; now MS hunts those who provide a preview of Longhorn. Isn't that a tad too extreme? After all, Longhorn will be made available sooner or later (depending when MS finally manages that). It's not a top secret product that will never pe public. Plus, I guess it looks pretty much like that screaming eye-candy XP. Nothing I want to see.

Fake Windows update fools

Found on The Inquirer on Sunday, 10 April 2005
Browse Software

The software giant Microsoft is warning about an email scam which encourages users to download a Trojan horse in the mistaken belief that they are updating their computers with a security patch.

Spinsters, from the Vole Hill in Redmond, said that the 'update' appears as a spam email. It points people to a bogus website that claims to host critical security updates. Of course anyone downloading from the site gets infected with the DSNX-05 trojan.

According to the BBC, media friendly anti-virus firm Sophos spotted the e-mail which uses subject lines saying "Urgent Windows Update" or "Important Windows Update".

That's nothing new at all... if MS just noticed those emails, then they probably never read newsgroups. I've seen those in many groups, with topics like above or eg. "apply this corrective patch"

Security software insecure

Found on The Inquirer on Wednesday, 30 March 2005
Browse Software

Online security firm Symantec said some of it anti-virus software has holes in it.

The company admitted its Norton Antivirus, Norton Internet Security and Norton System Works, 2004 and 2005 editions, were so flawed hackers could quite easily sneak in and knobble computers running the software.

Japan's Information-Technology Promotion Agency told Symantec about one situation with both Windows versions of Norton AntiVirus 2004 and 2005, where a real-time scan of a specific file type can cause the Blue Screen of Death to appear.

The programs' Auto-Protect and SmartScan features were found to be faulty and susceptible to Denial of Service attacks.

Good thing I would never use Symantec products. They are total resource hogs and there are lots of applications which do a better job.

Microsoft Silently Backs Favorable Presentation

Found on Slashdot on Friday, 25 March 2005
Browse Software

Two researchers, from the Florida Institute of Technology and Boston-based Security Innovation Inc., 'surprised the audience at a computer-security convention last month with their finding that a version of Microsoft Windows was more secure than a competing Linux operating system' according to the Seattle Post-Intelligencer. 'This week, the researchers released their finished report, and it included another surprise: Microsoft was funding the project all along.' When will they ever learn?

Surprise, surprise. You can have a good operating system, or you can try to buy your not-so-good operating system a better reputation. However, that usually fails.