March 17, 2006 4:00 AM PST
Spyware-killing Vista could take out rivals
- Related Stories
-
Piecing together Windows Vista
November 8, 2006 -
Anti-spyware added to beta of Microsoft's OneCare
March 9, 2006 -
Kits help phishing sites proliferate
February 27, 2006 -
Spyware fight attracts a crowd
February 10, 2006 -
Feds stay strong on spyware case
February 9, 2006 -
Russian hackers hawked Windows exploit for $4,000
February 2, 2006 -
Allchin: Buy Vista for the security
January 27, 2006 -
Computer crime costs $67 billion, FBI says
January 19, 2006 -
Windows AntiSpyware becomes 'Defender'
November 7, 2005 -
Kevin Mitnick on hacking's evolution
November 4, 2005 -
FAQ: Inside Microsoft's Client Protection
October 6, 2005 -
Hacking for dollars
July 6, 2005
Spyware has become a serious security problem for users of Microsoft's operating system over the past years, giving rise to a host of third-party tools to fight the insidious software. But perhaps the best defensive program has yet to ship, some analysts believe.
Microsoft later this year plans to release Windows Vista, the long-awaited successor to Windows XP. The operating system is being designed to shut the door on spyware. It will introduce important changes at the heart of the operating system, as well as to Internet Explorer, and include Windows Defender, an anti-spyware tool.
"The spyware threat will definitely shrink or shrivel" as Vista gets adopted, said John Pescatore, an analyst with Gartner. "We got a handle on spam. It still gets through, but it is such a small percentage now, we know how to deal with what gets through. That same thing will happen to spyware. It will be under control."
While Microsoft was working on Vista, spyware grew into a security nightmare. Experts believe the malicious software, which pops up ads on screens or spies on PC users, has been surreptitiously put on more than three-quarters of PCs. In an FBI survey published earlier this year, 80 percent of businesses reported spyware trouble, making it the most common security woe after viruses, worms and Trojan horses.
Every new version of Windows offers some security improvements, but Vista more so, said Rob Enderle, an analyst with the Enderle Group. "Vista, because it was pretty much conceived during the toughest times for Microsoft with regards to malicious software, has the most protection in it compared to any of their platforms," he said.
Spyware and its less-noxious cousin adware are widely despised for their sneaky distribution tactics, unauthorized data gathering and slowing of PCs. The unwanted software does not typically land on a computer the way a virus or a worm does. Instead, it creeps onto a system by tricking the user into clicking on a malicious link on a Web site or in an instant message. Alternatively, the distributor may secretly bundle it with an innocuous application that the user does want, such as a free application for file sharing.
Though spyware has been able to haunt users of XP, it won't be as easy for miscreants to get their malicious software onto machines that run Vista, said Austin Wilson, a director in the Windows Client group at Microsoft.
Vista takes on spyware
Microsoft is taking a three-pronged approach with Windows Vista to reduce the threat of spyware.
User Account Control
By default, Windows Vista will run with fewer user privileges. The privileges control how a user can interact with the software. Most Windows XP users have "administrator" privileges, which could be abused by malicious software to install itself on a computer.
In Windows Vista, users will have to invoke administrator rights to perform certain tasks, such as installing software.
Internet Explorer 7
IE 7 will run in "protected mode." This mode will prevent silent
installs of malicious software by stopping the Web browser from writing
data anywhere on the PC except in a temporary files folder without first seeking permission.
Windows Defender
Microsoft's anti-spyware tool will block and clean up any infections that do make it through. The tool scans for spyware, adware, rootkits and other malicious code, but does not include antivirus technology.
"We have taken out a significant number of the attack vectors that spyware authors use today," said Austin Wilson, a director in the Windows Client group at Microsoft. "We're not saying that spyware will be gone because of Windows Vista. We do think we will make a significant impact."
Microsoft is taking a multipronged approach to fight spyware. Unlike XP, Vista will run by default with fewer user privileges. People will have to invoke full, "administrator," privileges to perform tasks such as installing an application.
Also, Internet Explorer 7, included with Vista, will prevent silent installs of malicious code by stopping the browser from writing data anywhere except in a temporary files folder without first seeking permission. Lastly, Windows Defender will clean up any infections that do make it through.
"It is three layers of protection," Wilson said.
While this may be good news for buyers of Vista, it is not for anyone who makes a living from selling anti-spyware software. The worldwide market has boomed recently, reaching $97 million in revenue in 2004, up 240.4 percent from a year earlier, according to IDC. However, companies such as Webroot Software and Sunbelt Software are in for tough times, analysts said.
"The aftermarket for Windows anti-spyware is going to dry up almost completely," said Yankee Group analyst Andrew Jaquith. "Windows Defender is going to become the default anti-spyware engine, certainly for most consumers that have Vista machines."
Gartner's Pescatore agreed. "Integrating Windows Defender into Windows Vista is sort of the last nail into the standalone anti-spyware coffin," he said.
See more CNET content tagged:
spyware,
malicious software,
Microsoft Windows Vista,
margin,
anti-spyware
I used to get pop-ups/spyware on occasion nothing serious and I would regularly run things like Ad-aware or spybot.
However since the combination of SP2 for XP, Microsoft Anti- spyware (now defender) and Symantec Anti-Virus Corporate edition 9 & 10 I have gotten nothing?.not a single pop-up or piece of spyware/malware?etc on any of the 4 PC?s running XP in my house.
All of my PC?s have auto-update turned on since it was available and I am sure that has something to do with it but I honestly think most of this is just a cash cow for these companies quoted in this article.
When I switch to Vista I am going to dump AV software all together and just go with auto-update and the built in defender.
like this. While I'm not a fan of anti-competitive practices (e.g. the
Internet Explorer and Media Player issues), I do see security as
being a core function of the OS and therefore one that I would
much rather was not out-sourced to another company. I wish
Microsoft the best of luck in this and hope that its results means
that we no longer need the likes of Norton AntiVirus or Ad-Aware
in the future.
worsened.
One cannot discount the skills and
resourcefulness of the authors of malware.
Saying that Vista will put anti-spyware firms
out of business is like saying DRM measures will
thwart piracy. At best, both have fleeting
efficacy and are rapidly overcome by
knowledgable people adapting to the new
technology.
funny about this....is their "solutions" should have been standard in
the first place. You don't need to redesign the OS to implement
these changes. A simple redesign of IE along time ago would have
slowed the amount of spyware... they are doing this a little late in
the game.
Give it a shot.
http://www.microsoft.com/athome/security/spyware/software/default.mspx
The old joke Macintosh 89 / Windows 95 is back again in its newest form. Working professionally on over a dozen different operating systems including Mac OS X, FreeBSD, OpenBSD, GNU/Linux, NetWare, and Windows makes this sort of announcement especially frustrating. When will users drop the monkey see - monkey do attitude and recognize that other, better, products exist.
Until they begin to display this type of behavior you can bet I'll be running a 2rd party software to protect my data and my time.
I have never had a problem running my XP machines with the Zone Labs Integrity Desktop firewall (free), Grisoft's AVG antivirus (also free), and either Adware or SpyBot Search and Destroy.
There is NO WAY I would run Vista without them.
Hopefully, Microsoft Windows Vista(r) will fix IE to the point where it will be impossible for spyware to be installed without your knowledge. Of course, what should happen if someone intentionally installs a program that is ad-supported. I guess the Microsoft Defender (tm) might take it out, but then again it will probably not be perfect. So there'll be a demand for other anti-spyware products to make sure systems are protected.
Oh, and spyware IS and afterthought, for everybody EXCEPT Windows users.
I'm not paying for Vista if it's anything under $365.43....
go out and spend alot of money on a new system just to run
Vista??? Not me, I'll stick with my little mac.
longer going to be free.
This article seems to make it sound as if it is always going to be
free and is going to protect all Vista systems.
Microsoft will charge for Windows Live OneCare, its antivirus product that includes some PC health tools (like defrag and backup) as well as antispyware.
Joris Evers
News.com
Get with it.
But you LOONIX guys amaze me.
You just continue to drink your own acidic Kool-Aid, while writing your little open source mini-apps that no responsible business manager will ever, ever deploy. When are you going to tire of pissing up that rope?
The simple fact is that Windows rules the market for corporate desktops, and will for the foreseeable future. UNIX derivatives are hopelessly stuck in second or third depending on how you define the MAC OS.
"Secure Computing With L/UNIX since 1973." LOL, ever hear of DIGITAL or VMS? Where do you think NT came from? And, BTW, I thought LINUX was written from scratch? Sure looked like it to me when I first messed with it. I mean, it was GREAT. I could boot a computer into it but essentially had a useless device that had to RE-COMPILE THE KERNEL EVERY TIME I NEEDED TO INSTALL SOMETHING.
So, you get with it.
Fix your hardware support problems and write some applications that are reasonable substitutes for the extensive MS catalog deployed on networks around the world - along with some server-based systems that don't really suck (including APACHE and MYSQL) - or crawl back under the rock from which you came out to post your little drive-by-mini-rant.
Personally, I don't have the luxury of sitting on the Open-Source-Soapbox moaning about this and moaning about that while paying customers want me to develop/deploy/fix/maintain systems on their WINDOWS-BASED ENTERPRISE NETWORKS.
CYA at the bank, dood. Or maybe not.
So Microsoft is gonna have a rock solid operating system that
will be able to handle security attacks, and now will have anti-
spyware all worked out.....this sounds so familiar.....oh yeah it's
the traditional broken promise and bloated lie....you rember the
old ones don't you??
The new version of windows(95) will eliminate the need to
reboot (well most of the time). BIG FAT LIE
The new version of windows(98) is Plug and Play, no more
worries about drivers or configuration problems BIG FAT LIE
The new update to windows (SP2) has the best security features
and will dramatically decrease vunerabilities and the need for
patches BIG FAT LIE
The new version of windows(95,98,2000, XP) is Rock Solid and
crash proof "blue screens will become a thing of the past" BIG
HUGE FAT LIE
Were making it harder for attackers to get in and no how to
handle the ones that do in the new version of windows (BLEAK
VISTA) CAN YOU SAY LIE
Vista is a DRM nightmare! Designed from the ground up to
exploit the "consumer" and will be just like everything else,
worse then before, and more vunerable then a virgin in a federal
prizon.
Using anti-spyware...................Big help costs $$
Your not logged on as an administrator....big help (can be a
pain)
Shut down regularly.....Big help
- I don't have a HW firewall, don't even use built in software on
most of the time
- I don't have any anti-spywear, or antivirus software on my
system
-I am always running as Administrator, and rarely shutdown.
(Never had a successful attack, definately not any viruses, and
spywear is non existant.....but I'm on a Mac)
Point is, if I was on Windows running my system like I do, I'd be
down most of the time.....I know, because my roomates are
down most of the time on all their Windows Systems.
What am I doing that keeps the system clean?
1) Not visiting any "dangerous" sites such as porn or "hacker" sites.
2) Not installing any software that includes "klingons."
3) Not opening any mail that is "suspect" - and NEVER opening any attachments unless (a) I know the sender AND (b) the sender has SAID there is a file attached.
These three precautions have kept my system up and running, and free from anything undesirable.
Sadly, #2 has prevented me from using most of the truly free(as opposed to the "free to try") software available at CNet's Download.com
I can not think of a better way to "break" competitors new web apps than telling (common) pc users that the (competitors) web software that they are about to run "could be spyware" - what a great way to frighten that average user into not using a competitors new web software. And best of all, Microsoft does not even have to change the OS code to break the competitors new web apps -- they just have to update the current list of known spyware with the name of the competitor?s web application (via web updates).
Microsoft already breaks competitors desktop applications by changing the windows OS (but Microsoft can only do this OS "trick" once every 4 or 5 years). With anti-spyware, who-ever "owns" the anti-spyware software on the desktop will be the one who gets to "break" whatever competitors web software they desire (i.e., or, at least temporarily frighten common pc users into not using a competitors apps, until Microsoft can "catchup"). This is just too powerful of an opportunity for Microsoft to allow another software company (competitor) to "own" the (desktop) rights to.
Remember what Internet Explorer 6 said (even if there was no real reason to):
"... Internet Explorer has restricted this file from showing active content that could access your computer."
The whole computer industry/scam is providing progressively worse products every year. They're only concerned about upselling their latest non-functional software to solve problems they created themselves, as well as forcing users to buy new "improved" operating systems to replace better functioning ones of the past. This latter is nothing but greed-induced planned obsolescence. It has nothing to do with providing a better product and everything to do with raking in undeserved profits for newer, poorly functioning upgrades.
Microsoft and other computer production suppliers are nothing but Corporate criminals. Though it may be legal to change operating systems and make previous ones obsolete, it's certainly a slimeball way to make money.
I'd like to see Bill Gates and all the other Corporate thugs in the computer industry go to prison. Unfortunately, their scumbag practices are apparently legal, and will remain legal as long as Corporate America controls our government.
unlawflcombatnt
EconomicPopulistCommentary http://www.unlawflcombatnt.blogspot.com/
EconomicPatriotForum http://www.unlawflcombatnt.proboards84.com/
By the time I'm forced to upgrade my wife's computer to Vista (not even near a top priority since we just bought her a new computer), I'll have plenty of data from the early adapters on what's the best alternative spyware and firewall to use.
And as for worrying about spyware and viruses, most of us on this forum are above average when it comes to setting up and securing our systems. For the average user whom this is aimed at, it's a good thing. Windows is not as inherently as secure as Mac OS X but you can't deny it's gotten better over the years, forced in no small part by people like us making our voices heard and our comparision of Microsoft products like Internet Explorer to alternatives.
- Amazingly naive...
-
by Terry Murphy
March 17, 2006 4:58 PM PST
- To be blunt, there will be no such thing as a "Spyware-killing"
-
Reply to this comment
-
-
- Well stated and exactly right
-
by Dachi
March 20, 2006 1:49 AM PST
- Too bad CNET does not have a moderation for comments like this one.
-
-
See all 88 Comments >>Vista. Period. Certainly not because of the utter simplistic notion
that because Microsoft finally decides on taking a best - well,
better - approach to software security in Vista than it has in
previous OS efforts, everything will change. It's a new dawn in
technology, lol.
Unfortunately, that is no basis for even assuming Spyware
authors will even be remotely deterred. If you believe the
"Spyware-killing" Vista riff, you're living in a fantasy world. Not a
good place to be in a discussion revolving around security.
Here's the issue that everyone seems to quietly ignore: the
security game for Microsoft is over. That's right, over - and it
has been (rather obviously) for quite some time now. Microsoft
lost (abdicated, actually, lol), and the spyware authors of the
world won. That's the way it's been on the Windows platform
FOR YEARS up until now. Spyware, Inc., thanks to Microsoft's
reluctance to effectively deal with early enough, was allowed to
become big business and now has simply too much invested in
Windows to let MS's new OS stand in the way of their livelihood.
It's here to stay
And the problem for Microsoft (well, users actually) isn't just the
deep entrenchment of Spyware, et al., on it's platform. Insofar as
Vista is concerned, the minute the first copy of Vista ends up in
Mr Joe Consumer's house, Microsoft will have put all of it's
security cards face up on the table. Spyware authors, on the
other hand, have the luxury of not showing a single card in their
hand until they have taken the time to analyze what Microsoft
has done (or not done) security-wise with Vista. That's a
tremendous advantage for Spyware, a serious disadvantage for
Microsoft, and that's a distinction that cannot be overlooked,
underestimated, or, as in the case of this article, conveniently
ignored.
I mean you seriously don't believe that the folks who write
Spyware today cannot adapt/rewrite their code accordingly for
any changes that show up in the Window's platform tomorrow,
do you? Not that they may need to very much since activeX and
the system registry are all coming along for the ride in Vista.
You know, Just like the good old days, lol.