Service Provider (ISP) security- Windows intrusions

Advice:
Most service providers and even some software makers are now offering security protection as a service (for a fee) - antivirus- spam blocking & antispyware. It seems like we are being sold back protection that should be already be part of their service or software package. They are the source of most intrusive software and malware that flowing through their systems to our computers unabated. Bundling in antispyware is useless when built into an operating system or browser since it only works while you are connected to the Internet. Then, there is the problem of getting timely access to the most recent updates.

These same providers are charging advertisers big dollars to bombard us with selective advertising that is progressively filling our computer screen with uninvited garbage. To top it off, most intrusions are by software and hardware vendors themselves which seem destined to get even worse and more monolithic.

Some of the blame should be placed on the companies and individuals that show a lack of respect for your privacy- hidden in disclaimers, user agreements and down right trickery. And there are some biggies- name brand media giants, stock exchanges, financial services, etc. - that are patronizing third party intruders to do their dirty work on your computer. Our advise is: Do not patronize them!

Web Based Services. We have been beta testing several online subscription- based applications and services. Beta means "Being Economically Tested Athwart". Most are most extremely slow, intrusive and buggy. Our advice is to wait until they are officially released. We suspect we are going to be served up more "vendor supplied content only" as more application software becomes served up only online. The strategy is to eliminate licensing and replace it with infinite monthly fees. This will make software applications, email and messaging much more expensive in the long run.

Unfortunately, the basic premise of these services (Web 2.0) is that you will be online 100% of the time. This is not dealing reality since the cost associated with software-as-a-service and the connection fees would eliminate the majority of users. At the same, we doubt that vendors could resist the temptation to serve up only their own content, very similar to public TV, to sell advertising bytes. Software without licensing would mean you would have to pay monthly for use their software forever, regardless of whether you were quite happy with your copy of Office installed on your machine.

The answer lies in demanding more privacy from government & the vendors. Self regulation in this arena does not work in this greed driven environment. We have not seen or heard from any government official (elected or employed by) that has the guts or power to stand up their own Citizen's privacy.

All of this leaves us to conclude- "look out for your own best interests- first." Others do, as reflected in the new IE7 statement as follows:

"Microsoft Internet Explorer Privacy Statement
Published: October 18, 2006

"At Microsoft, we're working hard to protect your privacy, while delivering products that bring you the performance, power and convenience you desire in your personal computing. This privacy statement explains the data collection and use practices of Internet Explorer version 7.0 ("Internet Explorer"). This does not apply to other online or offline Microsoft sites, products or services.

Internet Explorer is designed to make it easy to browse and interact with websites on your intranet or on the Internet. Certain information is sent to the websites you visit, such as your IP address. This information may be logged on those sites' web servers. What information is logged and how that information is used depends on the privacy policies of the web sites you visit.

Security and Storage of Your Information
Microsoft is committed to protecting the security of your information. We use a variety of security technologies and procedures to help protect your information from unauthorized access, use, or disclosure.

Windows Defender is primarily a consumer antispyware solution. Windows 2000 was not a popular consumer operating system and mainstream support ended on June 30, 2005. Due to these reasons, we decided to focus more on Windows XP and Windows Server 2003. Both of these operating systems with the latest service packs have significantly better security protection overall, which will also help to prevent spyware on those computers that run those operating systems.

Information collected by Microsoft as part of providing you with Internet Explorer's features may be stored and processed in the United States or any other country in which Microsoft or its affiliates, subsidiaries, or agents maintain facilities. Microsoft abides by the safe harbor framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of data from the European Union. Microsoft may access and/or disclose information if required to do so by law or in the good faith belief that such action is necessary to: (a) conform to the edicts of the law or comply with legal process served on Microsoft; (b) protect and defend the rights or property of Microsoft and its family of web sites, or (c) act in urgent circumstances to protect the personal safety of Microsoft employees, users of Microsoft products or services, or members of the public."

We interpret Privacy Statements like this as saying that no personally identifying information is intentionally collected in this process, with the exception of your IP address. With an IP address (your internet phone number), your Internet Service provider computer servers can be identified which narrows down your location plus your unique identifier. With an identifier, a company could in cooperation with others, demand (legally or otherwise) your Customer information- name- address, phone number, etc. We imagine this information could be used with law enforcement to identify pirated software or for other purposes."

They acknowledge that pieces of your memory or files that could be part of a problem report that may contain personal information, but that this information will not be used or shared. However, information pertaining to third-party products maybe used (or we assume shared, sold or used against you or them) to the software/hardware or service provider. This could be the ideal situation for a company wanting to know exactly how well and what their competitors are doing.

People underestimate the potential of this huge "business intelligence" gathering operation that is occurring. For all intensive purposes, your system is accessible and can be used to reveal software installed (Microsoft or others), hardware configuration, all of your data, etc. In other words, your system is "pretty wide open".

Windows Defender- With the introduction of Vista there was renewed sense of security in Windows environments. Windows Defender is a free- light weight spyware detection program. Officially- "Windows Defender is a new security technology that helps protect you from spyware and other unwanted software. You can manually scan your computer for spyware or schedule the program to perform a scan automatically on a regular basis."

When asked the following question:
“Does the version of Windows Defender that is included in Windows Vista provide additional protection?"

Answer: "Windows Defender in Windows Vista offers additional performance and security enhancements including the ability to scan only files that have changed, to run under a security-enhanced account, and to scan files when you run them. Windows Defender will also allow you to scan files as you download them if you use Internet Explorer 7." and "Windows Defender is primarily a consumer antispyware solution. Windows 2000 was not a popular consumer operating system and mainstream support ended on June 30, 2005. Due to these reasons, we decided to focus more on Windows XP and Windows Server 2003. Both of these operating systems with the latest service packs have significantly better security protection overall, which will also help to prevent spyware on those computers that run those operating systems."

It would appear that the companies that designed Windows Defender were a ten person firm called Giant from New York and a Romanian company were acquired by Microsoft about two years ago. For the past fours months, we have been running Defender sweeps vs. more mature spyware programs. Defender has missed up to 70 potential spyware programs a sweep. And, it does not address Most Recently Used document logs which can be used in tracking your use.

Defender does not seem to have any data in their lookup database when it does find something. Our concern is that it would be helpful in deciding whether or not to quarantine. Sadly, a lot of people are going to be left with a false sense of security, if they rely on Defender to defend their shinny new Vista operating system, let alone XP.

It is our opinion Webroot has a huge lead on all the other security vendors in the spyware department. Many of them purchase a derivative of a spy sweeper from Webroot to include in their own Internet Security Suites. If Microsoft is really serious about listening to their Customer's number 1 concern "SECURITY"- they would have dug a lot deeper in the treasure chest to acquire or design their own code.

As far as pay-for-use Microsoft solutions, "Live OneCare" is an PC orientated on-line service for protection against viruses, worms, spyware and includes backup and restore capabilities. It has the same approach as Windows Defender and again, the weakness is its dependence on connection to the Internet for updates and interaction.

ForeFront is server based (another acquisition) for Client, Exchange, ISA and an Intelligent Gateway offering. Drawbacks on the Client side include the need to buy and run Active Directory on the server end and other programs to do things like URL filtering. Given that ForeFront will only secure Microsoft platforms, those with mixed computer environments (Apple, Unix, AS 400, etc.) are in for a very expensive and disjointed solution.

We suggest sticking with the Vendors like Symantec, Computer Associates, Kaspersky, Norton and McAfee that have been in the business of computer protection for at least ten years with millions of users pooling their subscription funds into improved security protection as the dangers arise and change.