The InformationWeek -- Blogs

Microsoft

Topics:   Microsoft

  • Email this page E-mail this page
  • Print this page Print this page
  • Bookmark and Share
  • icon

Take Your Choice: "Secure" System Or Stable System


Posted by Dave Methvin, Jul 13, 2008 04:15 PM

Last week, Microsoft put out an update that closed a DNS hole. Just one tiny problem with this update: it wipes out Internet access for users of ZoneAlarm. This is just one of the reasons why I don't run any third-party security software.


That's right, my systems are "bareback" and run nothing except the standard software that comes with Windows, such as Windows Firewall and (on Vista) Windows Defender. My kids don't run third-party security software, either. (My wife doesn't use security software, but she uses a Mac so I suppose that doesn't count.) In all that time, none of us have been infected with any viruses. The worst that's ever happened is that my daughter downloaded Bonzi Buddy.

I wrote about this seven years ago and it's depressing how little has changed. All the same problems are in today's security software: sluggishness, instability, false alarms, missed detections, and updates that don't keep up with attacks. Is there any other class of PC software that fails so often, yet is so widely deployed?

As the recent ZoneAlarm incident shows, security software still offers defects as well as defense. Antivirus programs are just as bad. Just last week, a neighbor who volunteers as the IT guy for a nonprofit company in the area came to me trying to remove WinAntivirus 2008, a scam AV program installed via exploits and deception. The company's Symantec security software let it right through. It turns out that Symantec's auto-update function had broken and it was no longer getting signature updates. After manually updating signatures, he was able to remove WinAntivirus 2008.

Symantec knows its product is bloated and that its uninstaller leaves behind running components. The company supposedly plans to do something about it. I sure hope so, because a decade of this nonsense is plenty, thanks.

Although I feel like my own experiment without security software has been a success, I know that most IT departments would be committing suicide if they set nontechnical users loose without it. Has anyone out there had good luck with any of the major security software vendors in a medium-sized to large company?

« Confessions Of A Guy Who Stood In Line 7 Hours To Buy An iPhone | Main | Video: iTrip To iPhone 3G Store »



Sign Up Now
For InformationWeek News Alerts




This is a public forum. United Business Media and its affiliates are not responsible for and do not control what is posted herein. United Business Media makes no warranties or guarantees concerning any advice dispensed by its staff members or readers.

Community standards in this comment area do not permit hate language, excessive profanity, or other patently offensive language. Please be aware that all information posted to this comment area becomes the property of United Business Media LLC and may be edited and republished in print or electronic format as outlined in United Business Media's Terms of Service.

Important Note: This comment area is NOT intended for commercial messages or solicitations of business.




 
 

  1. Detecting Scalability Problems With Intel Parallel Universe Portal
  2. Just Say No To SFAQL Parallelism
  3. QuickThread: A New C++ Multicore Library


Join The InformationWeek Group On LinkedIn


                           


  1. Apple Steps Into AT&T-Verizon Ad War
  2. Apple Says Users To Blame For iPhone Virus
  3. HP Picks Worst Name Ever For New Smartphone
  4. AT&T's iPhone Stranglehold Ending June 2010?


  1. Apple Accepts PhoneGap For iPhone Development
  2. Apple Seeks Permanent Halt To Psystar Mac Clones
  3. NIST Director Sees Key Role In Emerging Technologies
  4. Sprint Gets Nod To Buy iPCS
  5. FCC Chair Wants More Broadband
  6. Gartner: Data Center Problems Ahead

 

  Ars Technica
Boing Boing
Channel 9 Forums
CRN Blogs
Dr.Dobb's Portal: Blogs
Engadget
Gizmodo
GrokLaw
  Lifehacker
Schneier on Security
Slashdot
TechCrunch
Techdirt
Techmeme
Valleywag

  DECEMBER 2008
NOVEMBER 2008
OCTOBER 2008
SEPTEMBER 2008
AUGUST 2008
JULY 2008
JUNE 2008
MAY 2008
  APRIL 2008
MARCH 2008
FEBRUARY 2008
JANUARY 2008
DECEMBER 2007
NOVEMBER 2007
OCTOBER 2007
SEPTEMBER 2007