Slashdot Log In
The Netscaping of Symantec and McAfee
Posted by
Zonk
on Sun Oct 22, 2006 02:07 PM
from the sounds-painful dept.
from the sounds-painful dept.
rs232 writes to mention a C|Net article about the uncertain future of the popular anti-virus software companies. "I mention Netscape because, if you believe Symantec and McAfee, a similar situation is about to unfold within the security industry. Microsoft, again recognizing late that it had failed to seize upon this thing called security, is now about to bundle its own security solutions within Windows Vista and further enforce new security policies that lock out some third-party security solutions altogether. Vendors Symantec and McAfee have looked into the future and realized that people may one day speak of them in the way that we now speak reverently of the early builds of Netscape."
Related Stories
[+]
64-Bit Vista Kernel Will Be a "Black Box" 402 comments
ryanskev writes with news from RSA Europe, where a Microsoft VP spoke bluntly about the lock-down that will apply to 64-bit Vista. From the article: "Microsoft will operate 64-bit versions of Windows Vista as a tabernacle, with the kernel as the holy of holies, where only its own high priests of security may venture." While Microsoft has seemed to be making some concessions to the likes of Symantec and McAfee, considerable doubt remains as to their ultimate future.
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
This is NOT the same thing (Score:5, Insightful)
Symantect and McCafe are only parasites, leeching from Microsoft's -mistakes-. It was unevitable that Microsoft would one day try to fix those mistakes, and unlike things like Office Suites, it is Microsoft's -responsability- to fix this mistake, and it is a feature that SHOULD be part of an operating system (aka: security, though Microsoft's implementation is debatable).
Not only that, but McCafe's and Symantec's products are viruses of their own, doing unthinkable things to the operating system and screwing over their users: They are malwares. I, for one, HOPE these 2 companies die soon, or find a new business model.
Re:This is NOT the same thing (Score:5, Interesting)
Parent
Re:This is NOT the same thing (Score:5, Insightful)
As the head of a security company I used to work for used to say: "People would rather take an aspirin for their headache than avoid what gives them that headache in the first place"
Parent
Re:This is NOT the same thing (Score:5, Insightful)
Parent
Re:This is NOT the same thing (Score:5, Insightful)
Ok, everyone... Let's put on our tin-foil hats now. Seriously, that's probably one of the silliest things I've heard (since listening to coast to coast AM w/Art bell).
Unethical things such as what you are describing are not common business practices, especially when you are talking about a multi-billion dollar software company. Perhaps you small start-up my do some stupid crap like that, but when you are talking about a corporation that employs tens of thousands of employees, it becomes more and more difficult to cover up garbage like you are describing. It would literally be the case of "Killing the goose that lays golden eggs" - for supper.
Parent
Re:This is NOT the same thing (Score:5, Interesting)
My tinfoil hat might be a bit tight, but this does stink a bit. At the very least, what's going on is questionable.
Parent
Re:This is NOT the same thing (Score:5, Insightful)
I don't think it makes business sense for them to use AV as a long-term patch. It takes a lot of time and energy to keep AV signatures up-to-date, which means it costs money. If MS intends to give away or sell below cost its AV software - which it would almost have to do in order to drive McAfee et al. out of business - they could be losing a whole lot of money. And of course, if MS eventually slacks off (as they did with IE) or starts charging big bucks for new signatures, competition will spring back up. Symantec, for example, is a fairly diversified company: I don't see them going broke even if NAV never sells another copy. (They own Veritas now, remember.)
The best use of AV software for MS is as a short-term patch until they can release a real one. Say a zero-day exploit of Outlook is discovered. A new signature can be rolled out in a few days to their AV client, giving them a little breathing room to develop a patch for Outlook and test it to make sure it doesn't break anything else. This way, MS would only have to target the very latest or most serious malware. I expect that would make maintenance of an AV system much easier and cheaper.
Of course, it may not happen that way. This is MS we're talking about. They might be doing this just because it offends their sensibilities to see someone else making money.
Parent
Re:This is NOT the same thing (Score:5, Insightful)
Combine that with patching the OS like you mentioned and it make them look like they are taking security seriously, while recieving yet more cash from customers... It's a great scheme for MS. The elimination (if you actually beleive it will 'eliminate' anyone) of Symantec and McAfee would be a nice side benefit. Of course the reality is neither copy should worry about replacing MS's built-in controls, since it will have next to zero impact... But they know perfectly well they can use this to hurt MS and make them look poor and defenseless compared to the jugernaught MS represents... So they'll wring this oppurtinty for everything it's worth...
Parent
Re:This is NOT the same thing (Score:5, Insightful)
How much have they spent propping up XBOX and MSN?
Microsoft isn't afraid to burn a few hundred million bucks if they want to keep a player in a given marketplace.
Parent
Re:This is NOT the same thing (Score:4, Insightful)
That is actually a good thing. Keep in mind that no general malware author targets anythign BUT windows due to the ease of doing so. If Windows ever becomes more secure than Linux/Mac/*nix/Mainframes/etc., then the malware will target everything BUT windows.
Parent
Re:This is NOT the same thing (Score:5, Insightful)
Parent
Re:This is NOT the same thing (Score:5, Insightful)
Disclaimer: Since moving over to a Windows PC, I have only ever used Netscape, then Mozilla, then FF as my main browser. I have never and probably will never use IE.
That said, Netscape 3 was better than IE 3. Netscape 4 was better than IE 3. Netscape 4 was worse than IE4, and wasn't even in the same league as IE 5. NN4 was slow, bloated, and crashed at the drop of a hat. IE4 was faster and much more stable, and IE 5 was better again. There were browser torture tests released during Mozilla development that IE 5 had no trouble with that utterly choked Netscape. Hell, you couldn't even resize Netscape's window without it having to re-request the page from the server!
Don't get me wrong, I used NN4 right up until around about the time that Mozilla M8 or M9 was released, but to say that NN was superior to IE because of Composer is one hell of a stretch, given that Navigator was barely usable.
Parent
Re:This is NOT the same thing (Score:5, Interesting)
And no, the fact that in this analogy the end-user is getting screwed either way is not lost on me.
Bemopolis
Parent
Re:This is NOT the same thing (Score:5, Funny)
Parent
This IS the same thing (Score:5, Insightful)
Parent
Re:This is NOT the same thing (Score:5, Insightful)
As far as antivirus software goes, Microsoft are charging for OneCare, just like Symantec and McAfee, whereas in the web browser market, IE and Netscape were given away for free. That is a significant difference. When people pay for something, they need to make a choice; just using the free web browser already installed on their computer isn't a choice, it's a default that people barely notice. Now, when people must make a conscious choice, it is harder to win them over. So, in this respect Symantec and McAfee seem safe. However, they will, at the minimum, need to share the market with Microsoft. And there is always the chance of Office repeating itself - a paying product in which Microsoft won a monopoly. Really, Wordperfect is the example we should have before our eyes, not Netscape, as far as antivirus software goes.
As for antispyware, Defender is given away for free. This is exactly like Netscape, and I expect the antispyware market to die out, except for antispyware that lives as part of a bundle with an antivirus, which is not free.
Parent
Re:This is NOT the same thing (Score:4, Insightful)
But Microsoft gave away its browser for free - to steal market share. That stopped that market to developed and Netscape could no longer sell its browser and forced Netscape to give Navigator away for free.
So yes its basically the same thing with Microsoft killing another market by its dominating force.
Parent
Re:This is NOT the same thing (Score:5, Interesting)
Even under this situation, MS didn't start really gaining share until late IE4 Early IE5, and code quality was the reason Netscape started slipping market share. Not Win98 or Free browsers like Netscape would like you to believe. By that logic, Linux with Apache is just as guilty with doing Netscape in as Microsoft with IE, Since most of Netscape's money was made on Netscape's Web server software and not their browsers.
Navigator was absolute junk by the time Netscape was done with it. They kept claiming that MS was purposely denying access to windows so they couldn't code it better, well then explain why the Sun terminal I used to use at school had the same Netscape "crash after 1 hour use" bug that windows had, In fact, when they created mozilla.org and open sourced the thing, the first thing the Dev's for mozilla.org did was chuck the code and started from scratch.
Netscape could have saved their product, they could have diversified into other markets, they could have recoded it to work better, they could have did a ton of things, but in the end while Opera with their pay browser was still keeping their business going, Netscape decided that suing MS was the easier of all the other options. pure and simple.
Simply put, Microsoft did not Kill off Netscape. Netscape killed off Netscape.
Parent
Re:No they'll always be virus scanners (Score:5, Insightful)
1) I can do the rm -rf / on Linux, I just need to get the user to give it admin access. When dealing with a clueless user, this is easy. Most viruses get in via stealth or social engineering. They either infect another file you want, or they pretend to be something you want. So the user goes to install the infected software and the system asks for root. Well they give it root, since they want it to install and don't take the time to consider if it should really need it. Virus gets on as root and does as it pleases. Watch the average user use a computer, they just answer yes to everything. They just want the computer to shut up and give them what they want, they never consider that these security warnings mean something.
Also FYI Vista does just as you suggest. You run dopriviledged and have to escalate.
2) Data is WAAAAY more important than system and apps to just about everyone. Whenever I get called in to do data recovery at $100/hour do you know what it is that the client wants? It's not their OS or their apps, no it's their data. That's all that matters. They won't pay that kind of money to get their OS back, a system restore disk does that. It's the data that despite being so valuable was never backed up that they want. Deleting a user's data is in every way as bad as blasting their whole system to them.
I mean think about it. Your data is what's unique and it's what really takes time. Right now if you were to hose my OS install completely I could be back up and fully running, apps and all in 3-4 hours. Inconvenient, but no big deal. However if you were to blast the big project I'm working on and all its backup copies. Shit, I'd be out at least 200 hours of work so far. My concern isn't that a disk might drop and I'd lose my system. Big deal I'll fix that. My concern is that my data might get corrupted/lost.
The idea that a computer is more important than the data is only true in a limited capacity on multi-user systems or servers or the like. Yes, if I run a webserver with 50 users I'd much rather 1 user lose their data than the server get waxed. However on a home computer that's used by 1 person the data and the computer are essentially synonymous. The computer's reason to be is to hold that person's data and let them use it. If the data goes, the computer is damn near worthless.
Parent
Re:This is NOT the same thing (Score:4, Insightful)
And you clearly have no experience working with Symantec or McAfee anti-virus products. They *do* unspeakable things to the OS, like hooking all sorts of the OS that they have no business touching (the IP stack, for instance). They also don't uninstall cleanly, so once someone reaslizes how screwed up their computer is after using the crappy products, only a total reinstall can get things back to normal.
Both Symantec and McAfee seem to engage in the "perception of security by constant annoyance" school of thought (much like TSA). Other anti-virus vendors (Trend Micro, NOD32, etc) manage to work just as well without making the OS unstable and generally annoying to use. The sooner Microsoft fixes the underlying problems and gets those incompetents out of the security space, the better it will be for consumers and product-driven (rather than marketing-driven) security companies.
-b
Parent
Re:This is NOT the same thing (Score:5, Informative)
Parent
What? (Score:4, Insightful)
Speak reverently of Symantec? (Score:5, Funny)
Speak reverently of Symantec...... Bwahahahahaha
Re:Speak reverently of Symantec? (Score:4, Interesting)
Norton, maybe. Norton Commander and Norton Tools were excellent, but once Symantec absorbed Peter Norton & Co., it was a quick downhill ride from there.
Parent
So what? (Score:5, Insightful)
So b/c MSFT is actually doing some stuff to try and protect themselves from outside code (in addition to outside vendors) we're supposed to feel sorry for these people? Either revamp your products and find different stuff to fix or move along.
That or stop whining about MSFT locking you out of the kernel and concentrate on them selling software that "fixes" problems in their own buggy OS.
Re:So what? (Score:4, Insightful)
Take a look at Creative. At one point the realized that the Sound Blaster brand was not going to get them very far once generic sound cards found their way into every PC that gets manufactured. What did they do? Well, they gave graphics cards a try. I remember back in the 90s when you could get a Voodoo2 chipset from them. Now? They were one of the first to enter the MP3 player markets and continue to have *some* success despite Apple dominating that arena.
Get a life McAffee and Symantec, your days of being a market bottom feeder are coming to an end.
Parent
Death of Symantec et al a Good Thing (Score:4, Insightful)
Microsoft wants to see the number of exploits impacting its operating system disappear to zero. Only if they are successful will they kill the security vendors. And if not, the security vendors will prosper.
Netscape netscaped itself (Score:5, Insightful)
Re:Netscape netscaped itself (Score:5, Informative)
what changed was not the salary status of the developers, but the managment style guiding the devolopment.
Parent
But they are already unusable monsters... (Score:5, Informative)
Parent
Re:But they are already unusable monsters... (Score:5, Funny)
But that is security! Studies have shown that a system brought to a complete 100% standstill is impervious to malware and virus infection.
Parent
And the amazing thing (Score:5, Informative)
The threat to Symantec isn't MS making Windows unvirusable, that's not possible (barring trusted computing), the threat is that there are new AV companies that make good, fast, cheap products that beat the crap out of symantec's offerings. AVG and Kaspersky are two excellent choices. Also I hear lots of good things about Bitdefender though it leads to bluescreens on my (and other's) system.
Parent
Haven't we seen this before... (Score:4, Interesting)
I don't see a problem with that since I don't use either product and wouldn't mind seeing these two outfits go into the software oblivion. Microsoft will get lazy about updating the features on its security software and open source will come to the rescue with something better. It'll be IE vs. Firefox all over again. Ultimately, the consumer will still win out.
No. No, we won't. (Score:5, Informative)
As for Symantec, , I had a computer at work with a copy of Symantec Corporate AV 10.1 (the latest version) still installed after we chose to migrate away from it due to ever rising costs and poor support. I tried to uninstall it. The uninstaller crashed. Then, every time I tried to right click, it tried to reinstall itself. Yes, you read that right - Symantec's antivirus installs a handler that traps every right click within Explorer that runs a check to see if files are missing. After two hours on the phone with a Symantec rep who didn't know what they were talking about, I finally had it cleaned off the system.
What I'm trying to say, I suppose, is that the original Netscape, while not perfect software, had the right vision behind it. Symantec and McAffee don't. Both companies have gone downhill, and I'm absolutely sure it's for reasons completely unrelated to Vista's new kernel.
Market forces will speak clearly (Score:5, Insightful)
The OS is changing, and the nature of threats are changing. These companies started by writing software to protect against disk-to-disk threats, then file infectors, then worms, and so on. Each has changed their business model as the needs of the market have changed, and I'd be hesitant to casually write them off just yet.
The market will decide things in the end. Either the companies change and continue to meet customer demand, or they won't, and they'll fade away. My money is on smart people staying fresh and changing based on their past history.
The alternative is to essentially say "Netcraft confirms that security software companies are dead!", with just as much legitamacy.
The writing was on the wall... (Score:4, Interesting)
Next victim? Adobe: with its PDF and Flash.
Open sourcing these products, and creating decent interfaces for their PDF reader are the only feasible things [for Adobe] to do in my opinion. QT would be better than using GTK. You might wonder why: I cannot type or paste a link in the file selector dialogue of Adobe's PDF reader, in this day and age!! Think of it.
Cry more (Score:5, Interesting)
Also, Symantec and every other virus scanner makes use of non-approved APIs in win32. They were not documented, and not approved for the use that security companies gave them. Vista is finally removing deprecated APIs and replacing them with documented, hopefully bug-free versions. They have said numerous times in their blogs and elsewhere that they will help existing companies convert existing API calls into standard calls. Symantec et all are complaining because they make such liberal use of these APIs that they are facing a huge challenge to get their product on the market quickly, if at all.
Note that one-time file scanners will still work, e.g., what your e-mail client does with received messages. That can all run just fine in user space. The pervasiveness of anti virus clients, though, would require complete administrator access, something Microsoft has been trying to get rid of for every day use (as they should!). If you allow Anti virus software to run in administrator mode while in user mode, you also open the door to viruses easily being able to do the same.
And interesting enough (Score:5, Informative)
So it seems that whatever the problem that Symantec and Mcafee are having, it's not universal to virus scanners. Seems more like they are lazy and don't want to do any rewriting whereas their competitors are on the stick.
Parent
Re:And interesting enough (Score:4, Insightful)
McAfee and Symantec are whining about 64Bit Vista. Kaspersky & co are talking about the 32bit version, which has no PatchGuard.
Of course this is all mostly academic. PatchGuard will ensure that 64bit Vista will be marginalized. Numerous apps will fail because of it - you only need a thing like DaemonTools not working, and big portion of MS home target market will drop the 64 bit version like a rotten fruit.
Control freaks running corporate envinroments will use 64bit, as will users that specifically need more than 4 gigs of ram. Rest won't. Major system builders won't put 64bit Vista as preinstalled, as it would generate a big pile of extra support calls for no tangible benefit.
Symantec and McAfee are pissed if they have to release their security products with 'wont work on 64bit vista' stickers. Especially if at the same time OneCare will work fine. It will imply inferiority, even if in the real world there is no difference, because home users won't adopt the 64bit version, at least not until major home apps start asking for more than 4 gigs of ram (and we're still at least 4-5 years away from that)
Parent
Progress!? (Score:5, Interesting)
MS Vista (Score:4, Insightful)
good (Score:4, Insightful)
Both of these products, and Norton too, piss me off to no end when trying to debug problems on my friends' computers. I would never install them on my own computer, and haven't needed anything like it in ages on any other operating system. Since I end up having to reinstall Windows ANYWAYS, I always just tell people not to worry so much about viruses. I just tell them, don't click something stupid, don't use IE, you'll be fine. It's just one more "fear factor" that is so abundant in people's lives these days. Viruses are the last thing anyone should be afraid of.
Anti-virus software is nothing but leeches on CPU time, memory, and network speed.
Yes, well... (Score:4, Insightful)
The Netscaping of Symantec and McAfee (Score:5, Insightful)
Symantec and McAfee will find new lines of business or fade away because they are selling products that shouldn't exist at all.
These products are based on identifying any of hundreds of thousands of programs and stopping them from executing—in an environment containing a few dozen programs the user actually wants to run. It's far easier to allow the few dozen and deny access to anything that isn't on this short list than to check everything against a very long and growing longer list of signatures and behaviours.
In the fullness of time, MS operating systems will fully implement Default Deny security, a path they have already started down; PatchGuard is part of it. When this is done, there will be nothing for anti-virus software to do.
I run my systems using just this part of F-Secure (Application Control enabled, everything else disabled) and the occasional scan. Same approach to browsers: all is forbidden unless expressly allowed. Scan results are always zero hits.
I look forward to the day when this is written into the OS code. Vista security is a good start.
Everyone is forgetting something... (Score:5, Insightful)
When you think about it, this ITSELF introduces another vulnerability. Another point of failure. Why bother exploiting the OS, when you can use the nice convenient path provided to you by the AV software? Everyone seems to forget this.
Microsoft gets bashed for their 'insecurity' and the moment they try and IMPROVE that, they get flamed, and people cry foul and start throwing around such words as 'monopoly', 'abuse', 'lock-out', and the tin-foil hatters come out of the woodwork and start bashing MS security, while somehow totally missing the absurdity in what they're saying!
Other AV companies have managed to adapt to the kernel lockouts, why can't Symantec and McAfee do the same? Instead, they'd rather keep their grubby paws hooked into the OS as deep as they can be, so that they can effectively hose a user's installation, then charge them $80 for phone support to resolve the issue.
People can't have it both ways. You have to give credit where credit is due. Windows One Care is not installed by default, it's a FOR PAY product (which totally differentiates it from IE vs All) that you have to buy IN ADDITION to the OS. Windows Defender is free, and protects against spyware, and comes pre-installed. While I don't particularly like that, it doesn't really bother me either. People install Yahoo Messenger, and it wants to install a Toolbar with Yahoo Anti-Spy. The same goes for Google, AIM, MSN(yes I know that's redundant), and a plethora of other IM options, and even just generic toolbars. Most ISPs now days 'give' you AV/AS to use. So Windows Defender doesn't bother me, there's already another 50 billion people trying to give me spyware protection (none of which I use, the standard Windows Firewall is quite sufficient for me thank you), so why not MS too?
I had the opportunity to participate in the beta for OneCare (wasn't hard, they offered it free, and I liked that idea, since people were inevitably going to ask me about it). I found it to have a rather large footprint, and be fairly slow. Given it's competition in the form of Symantec NIS, and McAfee's Internet Security Suite, and Trend Micro's Internet Security Suite, it's performance was roughly average. It wasn't as fast as TM, but was quicker than NIS and MIS in most cases. What struck me was only TM had a better detection scheme, and even then it was marginal (though I know a single thing getting through can mean the difference between being completely hosed, and being OK, never knowing how close you came to Virtual Armaggedon). MS One Care did a MUCH better job of catching/stopping spyware then all of them (Windows Defender gets lumped into One Care installs generally).
Think of these things from the USER'S perspective. NOT from YOUR perspective. For people who are WAAAAY non-tech savvy, One Care offers a one-stop-shop for performance tuning (uncomplicated), AV, and AS and Firewall protection. It's easier to use than NIS, WAAAY easier than MIS, and TM rounds out the list of being the least user friendly. Bottom line is this is just one more cool way to bash Microsoft for trying to improve things. Do you think they're using kernel hacks for One Care? Probably not right now, as people would LOVE to find a way to exploit One Care to compromise a machine. Will it remain that way? Probably not, because I see things getting into the kernel eventually, and requiring that the kernel be accessible, at least to be scanned and locked so that it can be replaced. But still, NO AV/AS program should EVER be hacked into the kernel. Period.
It opens up the doors for too many things. OneCare also doesn't bombard the user with useless popups and notifications like the others often do, which aids in hosing the system as they USER tells it to do something bad.
One Care is a LEGITIMATE software release by Microsoft, and not at all a surprise. What is surprising to me, is that it took THIS long for it to resurface.
That is all. Please return to your normal dailty activity.
Re:symantec (Score:4, Insightful)
Parent
Any monopoly isn't "good enough" (Score:5, Insightful)
Parent
Re:symantec (Score:4, Informative)
Parent
This isn't really competition... (Score:5, Insightful)
Let's use an analogy. Let's say I build an automobile and it's famous for having fuel injectors that clog up. People begin getting annoyed as the engine runs worse and worse until they get stuck on the side of the road. Along comes WidgetX. They invent a device that attaches to the engine end somehow "prevents" the problem. The downside is that the efficiency of the engine drops and you burn a LOT more gas, but your odds of getting stuck on the side of the road are greatly reduced. The next model year, the car company redesigns the engine so that the injectors no longer get clogged. WidgetX cries foul because now their product has become both unecessary and it has become obvious how wasteful of resources it was. So WidgetX demands the EU authorities to force the car company to go back to selling failure prone injectors instead of coming up with another innovation that actually helps consumers.
Call me crazy, but I don't see Microsoft as the "bad guy" here at all.....
Parent
Re:First of all (Score:4, Insightful)
There is no consumer market for an OS distribution that doesn't support DRM'd media play out of the box.
Apple understands this. Microsoft understands this. Linspire -- which has a modest presence in big box retail -- understands this.
The only one with his head still stuck in the sand is the Geek.
Parent