Microsoft OneCare did/did not improve in recent AV tests
128896
Blog: Two different tests from one testing site yields different results.
418922
Malware blocking credentials questioned Windows Vista has only just left the starting blocks but security watchers have wasted no time in challenging claims that it provides improved security defences.â¦
732898
InfoWorld - Microsoft has finalized the code for theÂ first service pack for Windows Vista,Â but won't release the code via its update services to customers until mid-March, the company said Monday. Moreover, some devices may not work with the initial version of the software because of driver issues that continue to plague the OS.
633507
(InfoWorld) - Microsoft released a beta version of its next-generation Windows Live OneCare 2.0 desktop security and management package on July 11, touting a number of improvements made to the product, including the ability to monitor multiple PCs on a local network. Available for free download on the company's Web site, the combined software and service offering -- which is aimed specifically at consumers and small businesses -- also adds new functionality for backing-up data and protecting against malware attacks. Introduced roughly six months after the launch of Microsoft's OneCare 1.5 release in January 2007, the beta -- which like its predecessors includes firewall, AV (anti-virus), backup, and anti-spyware programs -- boasts security improvements, including new tools for locking-down wireless networks and an automated, self-adjusting firewall. Among the new management features being introduced in the product are support for the sharing of printers among multiple computers, a start time optimizer for speeding computer boot cycles, and an online backup system for photos and other images. As part of the service portion of the offering, Microsoft said it has added more proactive system fixes and end-user configuration suggestions to the package along with monthly reports on important computer events or recommended upgrades. The centralized backup feature claims the ability for users to configure and monitor automated storage controls for all PCs covered under a lone OneCare subscription -- which can cover up to three machines -- in a single network location. The newest iteration of the package also adds support for 64-bit PC systems. Microsoft, whose security software product business remains in its early stages, is the third major company to release a new version of its consumer endpoint protection tools in the last month alone as both McAfee and Symantec have also revamped their competing applications. The software giant gave no indication as to when it might push OneCare 2.0 from beta into production but said it is actively seeking feedback from users who decide to try out the package. Since its initial launch in May 2006 OneCare has drawn mixed reviews from end users and security researchers. While many experts have said that the product's pricing -- $49.95 for protection and management of up to three PCs for one year -- has drawn the interest of many consumers, the product has fared poorly against its rivals in some head-to-head bake-offs. In such a comparison study published in March 2007 by researchers at AV-Comparatives -- a project based in Austria and overseen by security researcher Andreas Clementi -- OneCare performed poorly next to similar products made by Symantec, McAfee, Kaspersky Lab, BitDefender, Fortinet, F-Secure, and several other anti-virus providers. According to the report, OneCare ranked last among the products tested in detecting Windows viruses, worms, macros, scripts, and other OS threats, detecting 91 percent of the threats. In stopping systems intrusion through backdoors, Trojan viruses and other malware attacks, OneCare also ranked last out of 13 vendors with 79.6 percent detection. Despite any perceived shortcomings in OneCare, at least one industry analyst said that Microsoft has had a significant impact on the consumer AV landscape for its relatively short run on the market, specifically around pricing. By offering coverage for multiple PCs for much less than it would have cost using older products from market leaders Symantec and McAfee, Microsoft has forced those companies and others to drop their own pricing and changed consumer perceptions about the cost of AV tools, said Natalie Lambert, analyst for Forrester Research. "The market is dramatically changing, and Microsoft is part of reason for that," Lambert said. "If you look at demand, consumers are not willing to pay for security software as they were in the past, they've found ways to get these programs for free, and Microsoft started some of that activity by driving prices down." In terms of functionality, Lambert said that OneCare 2.0 appears to have pulled Microsoft closer to some of its rivals, although she does not believe that most consumers are ready to use all of the tools, such as centralized backup for multiple PCs. Instead of buying off-the-shelf AV products as they may have done in years past, the analyst said that consumers are increasingly using programs bundled for free in their PCs or signing up for services offered by their ISPs, many of which are offered at no charge. "Partnerships are more essential than ever before in this market," she said. "Winning this space will come down to who has the most and best partnerships in the future; consumers want full functionality, but they don't want to pay for it, and the vendors will need to get money from someplace, and it will be from the PC manufacturers and ISPs."
340407
A small group of testers is now putting Windows Vista Service Pack 1 through its paces.
39413
Here is a comparison of Microsoft's Windows Live OneCare and upcoming products from Symantec and McAfee.
317610
Multiple Microsoft sources have confirmed that the first beta test editions of Service Pack 1 for Windows Vista were distributed to a select group of about 12,000 testers today. BetaNews learned these are indeed exclusive invitees, not merely a subset of the company's MSDN or TechNet subscriber base.
50456
Although Microsoft had planned to release a patch today for a OneCare flaw that eats Outlook and Outlook Express e-mail files, user complaints prompted it to actually put out the fix on Sunday.
749656
Microsoft released a beta version of its next-generation Windows Live OneCare 2.0 desktop security and management package on July 11, touting a number of improvements made to the product, including the ability to monitor multiple PCs on a local network.
533030
Windows security tools fail tests to see if active viruses can successfully infect the software.
298609
One in five applications installed on Windows PCs are missing security patches, a Copenhagen-based vulnerability tracker has reported.According to Secunia APS, more than 20 percent of the applications scanned by its Personal Software Inspector (PSI) utility were open to attack because available fixes for security flaws had not been applied.&quot;More than 20 percent of all applications installed on users&#39; PCs have known security flaws, but the users have yet to install the patch provided by the vendor of [the] product,&quot; said Jakob Balle, Secunia&#39;s development manager, in a post to the company&#39;s blog last week.The 20 percent figure was based on scans of more than 14.5 million applications installed on the Windows PCs operated by users who downloaded and installed Secunia&#39;s PSI. The utility scans for some 4,200 different applications and reports on their patch status.The 1-in-5 ratio, however, is an improvement over earlier PSI scans. Last May, Secunia said that 28 percent of the&#160;applications PSI scanned were missing available security updates.Secunia released the free patch-detection utility a year ago but shifted it to Release Candidate 1 (RC1) stage earlier this month. The company claimed that nearly 191,000 users have downloaded and run the program.PSI, which runs on Windows 2000, XP, Vista and Server 2003, can be downloaded from Secunia&#39;s Web site.Computerworld is an InfoWorld affiliate.
706230
(InfoWorld) - Microsoft released the beta of Windows Vista Service Pack 1 to a private group of testers, taking one step closer to the anticipated official launch in the first quarter of next year. In late August, Microsoft for the first time offered a release schedule for the long-awaited SP1. At the time, the software giant said the beta would become available this month to between 10,000 and 15,000 testers. One beta tester, Brandon LeBlanc, author of the Windows Experience blog, has already written about his experience with SP1. In addition to a couple of minor user interface changes, he has noticed improvements to the overall responsiveness of his PC and laptop, which both got the beta software. He particularly noticed that resuming activity after the machines hibernate and copying files from one directory to another work faster. LeBlanc also reported improved battery life on his laptop. SP1 also appears to have solved some wireless networking issues he had, which caused his computer to lose connectivity often, especially after the laptop was hibernating. Since he installed SP1, that problem has gone away, he said. Microsoft had promised that SP1 would include a speedier resume function following hibernation. It also said the update would include improved performance of Internet Explorer 7, particularly for Web sites running AJAX. Microsoft will distribute SP1 via Windows Update, its automatic update service. Alternatively, corporate administrators can use a standalone version of SP1 in conjunction with other programs they may use to distribute software to computers. Also on Monday,Â Microsoft released the initial Release Candidate (RC0) of Windows Server 2008, code-named Longhorn. That means customers can download and try out the latest version of Windows Server 2008, including for the first time a preview of Viridian, Microsoftâs virtualization technology. The release of the RC0 means that development and testing are progressing and that the server code is entering the final stages of testing, Microsoft said. Last month, Microsoft pushed back its forecast for the release of Windows Server 2008 from this year to the first quarter of next year.
151962
The Vista 'experiment' It's upgrade time for VMware's Lab Manager package.â¦
411156
Microsoft's consumer security software changes the AU (Automatic Updates) settings in Windows XP and Vista without telling users or getting their approval, a researcher said Thursday -- behavior that may explain recent reports of patches being installed and systems rebooting without permission.When Microsoft responded to new charges of silent changes last week, however, it denied that AU settings were ever altered without user approval, and it didn't mention OneCare as a possible culprit.Scott Dunn, an editor at the "Windows Secrets" newsletter, reported Thursday morning that OneCare silently changes AU settings as it installs. No matter what AU setting the user selected previously, OneCare's installer quietly changes it to the fully automatic option."Some security products have turned on AU in the past," said Dunn, who also tested several other current consumer suites, including Symantec's Norton 360 and Norton Internet Security, McAfee's Internet Security Suite, and Check Point Software's ZoneAlarm Internet Security Suite. "But OneCare was the only guilty party."OneCare's willful way with AU may be an explanation for the reports two weeks ago of machines downloading and installing the Oct. 9 set of security fixes even though their owners had explicitly instructed Windows to ignore all downloads or notify them before they were installed.Several days later, after it wrapped up an investigation, Microsoft said AU settings were never changed without user consent, and it blamed absent-minded users for making modifications and then forgetting that they had."I find this surprising and very disturbing," said Dunn. "If they're going to change [AU] settings, they should let you know."Four options, down to one In both Windows XP and Vista, users can select from four options in AU: Download and install all updates automatically; download files but do not install them without user consent; check for but neither download nor install without permission; and disable Automatic Updates entirely.OneCare, sold for $49.95 and offered as a free 90-day trial, sets AU to the first, and all-automatic, setting, said Dunn, on both operating systems. "It does that even if Automatic Updates is completely disabled," he added. If users later uninstall OneCare -- for instance, after a trial has expired -- the software does not return the machine to the earlier settings; they must be reset by the user."Worse, OneCare silently turns on [Windows] services that have been disabled by the user," Dunn said, referring to the two services that some users, frustrated at earlier incidents in which Windows retrieved and installed patches without permission, have manually turned off: Automatic Updates and Background Intelligent Transfer Service. The services can be switched off manually using the Windows services.msc utility. Normally, once disabled, they remain that way until the user manually turns them back on.ComputerWorld confirmed Dunn's account of OneCare's AU changes by installing the security suite on both Windows XP and Windows Vista.At no time during installation, said Dunn, does OneCare tell the user that the software will modify Windows' settings or provide an opt-in dialog. Nor do the various online documents -- including Microsoft's privacy statement and an addendum for OneCare -- that are offered up early during the process contain any information about the changes. "It turns out there's a brief mention of it buried deep in one of the OneCare help files," said Dunn. "But that's not the same as telling users upfront."The help file (select "What does Windows Live Update do to help manage and maintain my computer's software updates?" to view the pertinent section) acknowledges that OneCare makes changes without bothering to ask. "When you first install Windows Live OneCare, setup automatically enlists your computer in Microsoft Update and changes your computer's settings to download and install updates automatically using Automatic Updates," it reads.Who's 'forgetful' now? Although Microsoft was not immediately available for comment this morning, it made it clear last week that reports of unauthorized updates, and even PC reboots, could not be blamed on its software."I want to stress that the Windows Update client does not change AU settings without users' consent," said Nate Clinton, a program manager with the Microsoft Update team in a company blog entry a week ago. He went on to list five possible explanations; all require the user to take action or accept one option from several offered.Earlier, a Microsoft spokeswoman had been more blunt. "It may be more a case of someone clicking to change their AU settings but not realizing/remembering doing so," she said last Tuesday. She also called out OneCare's installation as one such possible moment and claimed that the security suite offered users the option of changing AU settings. It does not."This is just one more example of Microsoft having the attitude that we know better than you do, that you should just stop asking questions and let us do what we want," said Dunn.Computerworld is an InfoWorld affiliate
402563
(InfoWorld) - Microsoft blamed human error for aÂ Windows Genuine Advantage problem that identified legitimate Windows users as piratesÂ last week. "Nothing more than human error started it all," Alex Kochis, senior product manager for Windows Genuine Advantage at Microsoft wrote on the company blog Tuesday night. New software was accidentally loaded onto the live servers running the system, he said. That ultimately caused the servers to decline activation and validation requests that were good, he wrote. While Microsoft quickly noticed the problem and rolled back the changes within a half hour, the problem continued to affect the validation service, he said. The activation process was fixed in that time frame, he said. The company is implementing some changes to make sure a similar incident doesn't happen again. It is improving monitoring in order to find out sooner if there is a problem, he said. Microsoft is also adding checkpoints that should prevent accidental changes to the servers. Kochis' explanation is fine but the incident is still troubling, said Michael Cherry, an analyst at Directions on Microsoft. "I think it's unsettling for people when it doesn't validate," he said. While it's great that Microsoft has put some new procedures in place, Cherry was surprised that it was even "feasible" for someone to accidentally load the wrong code into the live environment. "It just raises the question of what other things have they not done," he said. In his blog post, Kochis clarified that an existing policy will automatically validate all users if the WGA servers are down but that in this case, the servers weren't down, so that policy didn't kick in. With that policy in place, Cherry wonders why Microsoft didn't just take the servers down while they were diagnosing and fixing the problem so that legitimate users wouldn't continue to have issues. The problem began on Friday evening and lasted through Saturday afternoon. During that time, some users incorrectly failed the validation process, leaving them unable to use certain features including Windows Aero, Windows ReadyBoost, and some features of Windows Defender and Windows Update. Affected users also saw a message in the corner of their screen that said "This copy of Windows is not genuine." WGA has been criticized since its unveiling in 2005. The system, which works for Windows XP and Vista users, is meant to help Microsoft disable software pirates, but some users say it's cumbersome. In addition, Microsoft faces two class action suits that characterize WGA as spyware and cite concerns over how Microsoft uses data it collects about users through the program.
359809
(InfoWorld) - There was a little surprise buried inÂ Microsoft's monthly security bulletins Tuesday. It turns out that Microsoft had quietly slipped out one of the February fixes just days before its Jan. 30 Vista launch. The fix was for a bug in Microsoft's Malware Protection Engine, used by products like Windows Defender, OneCare, and Antigen to scan for malware. Microsoft had discovered that the engine could possibly be tricked into running unauthorized code if it scanned a specially crafted PDF file. Nobody has actually launched such an attack, but since these products are always automatically scanning for malware in the background, the vulnerability could have led to some pretty nasty exploits. Still, it's strange that Microsoft waited so long to notify its customers of the patch. It's rare for Microsoft to release one of these out-of-cycle updates, but since it adoptedÂ its monthly patch process back in October 2003, it generally lets people know about them as soon as they're released. Microsoft's Mark Griesi told me that the company decided to send out the malware engine fix as soon as it was ready on January 26 and that this kind of quick fix is standard practice with most security software. But he said there was no particular reason why the company decided to wait until February 13 to tell people about it. Microsoft just hasn't been in the position of having to patch its security software since rolling out the monthly patch process, he added. "It was one of those first-time situations: 'Should we say something now or should we just wait,'" he told me. "This time we decided to wait. We won't do it again." From a PR perspective, it wasn't a bad move. Microsoft has touted Defender as one of the top three Vista security features. It wouldn't have been much fun to be talking about a major security flaw in the product just days before the Vista launch, would it?
567228
InfoWorld - Microsoft has finally broken its silence on the timing of the release of the&#160;highly anticipated Windows Vista Service Pack 1, saying the software updates should be in final release in the first quarter of next year with the company shipping off a beta next month to 10,000 to 15,000 testers.