Symantec Brings Complaint Against MS to EU 273
linumax writes "Symantec has made a complaint against Microsoft to EC anti-trust regulators over the software giant's entry into the security market. The "informal" complaint allows the Commission to consider whether or not an anti-trust case is merited. The Commission is the executive branch of the European Union (EU)." From the article: "The news comes on the day Microsoft announced plans to begin offering business users an integrated anti-virus and anti-spyware product called Microsoft Client Protection. A beta version of this product is expected to be released by year's end. The company is already offering some customers a beta version of its Windows OneCare consumer security software. At issue is Microsoft's plan to bundle its security software with Windows Vista, the next major version of the Windows operating system due next year."
Mafia (Score:5, Insightful)
the poop factor... (Score:5, Interesting)
Re:the poop factor... (Score:5, Insightful)
I'm not so sure. While it's true that Norton/Symantec Anti-Virus is one of Symantec's big packages, it's not the only software they sell. Their recent acquisition of PowerQuest gave them all that software, including Partition Magic. They have a very active Ghost division, a division that while it might not be quite as profitable as AV, likely makes a fair bit. They've also got several other products like spam/virus filtering. The lists of their Home [symantec.com], Small Business [symantec.com], and Enterprise [symantec.com] products are pretty large. If Symantec did completely close down it's AV division, while it might hurt the company for a while and cause a number of jobs to be cut, they have plenty of other products available to keep on going, at least long enough to re-group and put their focus someplace else.
On another topic, these issues are interesting. It's not so much that Microsoft is trying to bully Symantec out of business as it seems they are really trying to improve the view most people have on the security of Windows. XP SP2 gave users a "free" firewall which has drastically cut down the spread of worms and the like. It only seems logical that the next logical step in securing an OS is to control and protect the content already on the system, namely with an Anti-Virus agent.
You could look at this as saying that the reason that Symantec and others were able to sell AV and firewalls in the first place was because Microsoft was deficient in OS security. Now that they're catching up with it, any specialized companies that took advantage of this niche are going to hurt unless they can focus on something else. "Diversified interests" applies to large companies just as it does to personal portfolios.
Yes, it sucks for these companies, but it's not the same thing as if Microsoft started offering Office free with Windows.
Re:the poop factor... (Score:3, Informative)
Re:the poop factor... (Score:2)
Good point.
Re:the poop factor... (Score:3, Informative)
Antivirus market (Score:4, Insightful)
It is consistently the best-selling software in computer stores, and just thinking of the profit it generates from the continued subscription (which may be only part of the market but with a huge margin) should make any executive cream his pants. I agree they wouldn't let it go without a fight.
Yes (Score:2)
Money. (Score:2)
So, every new "upgrade" has to have fixes for old problems AND the coolest new technology (think "ActiveX").
But no time/effort is spent in making sure that the cool new technology is secure because
And so the cycle repeats, endlessly.
Re:Money. (Score:2)
Re:Mafia (Score:5, Insightful)
Well, the fact that the users are broken as well. If linux users ran every funny program that dumped into their inbox or came across on some shady site, they'd be equally screwed. However you want to tell me the linux security model helps, it doesn't. If people were used to sudo as root to install something, they'd install this. If they had to chmod programs +x, they'd chmod this too. The only way you could protect users against themselves is to make it very hard to install software (bad) or lock them in to only use your distro's software (worse). Or run anti-virus. I don't recall the last time my anti-virus warned me about something that I didn't consider obvious, I don't actually need it (but I design security in layers, just in case). Anti-virus is a fix for broken users, not broken software. And Linux and BSD ships with a firewall too, that's hardly a sign of breakage.
You confuse "virus" with "trojan". (Score:5, Informative)
While it is correct that the majority of current infections are via trojans, they are not the only problem. Ubuntu handles the issue of worms by just not running any open ports in a default installation. So Ubuntu will not be hit with anything close to Slammer or Blaster. You are wrong, it does help. SOME people would. But that's because system security is bound by human stupidity.
But the people who are currently being infected because they double-clicked on "sexy.jpg" which was really "sexy.jpg.exe" would have to go through a LOT more effort to accomplish the same on Linux.
#1. Save the attachment. (extra step)
#2. Find where they saved it. (extra step)
#3. chmod it (extra step) warning
#4. Double click it.
#5. Give sudo password. (extra step) warning
So, all of a sudden, all (99.99%) of the *.jpg trojans are dead. Which means that you have to convince someone to actually run an app on their box, which they know is an app. Some people will still fall for that, but not as many as fall for the
In a correctly designed system, the user will KNOW that s/he is running an app (not thinking it is a graphic) and be ASKED for additional authorization.
And that only matters with trojans. Viruses and worms are few and very, Very, VERY far between on Linux systems.
Re:You confuse "virus" with "trojan". (Score:2)
I know I will get modded flamebait for this, but.. This is kind of like saying that Linux is safer because it is less user friendly.
:) Not flamebait. (Score:5, Insightful)
On the other hand, if you define "user friendly" as "works and keeps away trojans" then Linux is more "user friendly" than Windows.
The question is
Will the average Linux user spend less time and effort keeping his/her system clean and functional than the average Windows user? Less time but more effort? Less effort but more time? I believe it will be less time and less effort to keep a Linux system clean. Less time and less effort should equate to a more "user friendly" system, eh?
Not a useful definition (Score:3, Insightful)
Apart from you that is? :-D
How about you define "user friendly" as anything you want just to show that Linux is it?
The MS windows problem is that users often do not know about trojans and how to spot them. Linux just makes it harder to run things accidentally. That doesn't help if a user WANTS to open a trojan. The user friendly part would be helping users understand about trojans and the associated risks in a seamless manner.
By the way,
Re:Mafia (Score:5, Insightful)
I still call that a broken security model.
It should be possible to use the OS to put a fence around such programs so people can still run them. SELinux sort of has some of the infrastructure to do that. But moving to a full capability model may be a better choice.
Blaming people for doing stupid things all the time is a very poor approach to security. Computers are for people. People aren't for computers. Things should work with people in such a way that they have to remember as few rules as possible.
In fact, people might react a little better and follow the rules more if you explained to them that the computer was too stupid to distinguish between the program that ran off the net and a program installed by the sysadmin, and so it would let the program from the net do all the same things, so to help the computer out because it's so stupid, they should avoid running things from the net.
Re:Mafia (Score:2)
When spyware was a significant threat, they bought an anti-spyware company and offered it for free within months.
These viruses have been around for a while.
Re:Mafia (Score:2)
And what do you think they should have done differently with the /design/ ?
Now THIS is +5 funny! (Score:5, Insightful)
Because...Microsoft screws over EVERYBODY who has any business dealings with them.
Everybody
Re:Now THIS is +5 funny! (Score:4, Insightful)
But me being pro-Linux put asside, I somehow agree with MS in this case. While Media Player, Browser and other functionalities that are bundled with OS can be argued with some facts, Antivirus and AntiSpyware software provide basic security.
On one side you can watch people laughing and pointing on every security bug, but on the other people agree with the option that MS is not allowed to bundle software against security and malware problems. Well, it is not a nice time to be at MS position.
Re:Now THIS is +5 funny! (Score:2)
Re:Now THIS is +5 funny! (Score:2)
Most (or at least a lot) of the infections come when people install software downloaded from some other source (for example as a bonus pack when installing one software you get some Gator or alikes on many occasions). How could MS protect against that? Pray? Wish? If they don't do something, they're screwed, if they try to do something, they're fucked (somehow it even makes me happy that it is so).
Again I'm pointing that I'm usin
Nope, a good security model is "basic security". (Score:5, Insightful)
Since Microsoft does not have a decent security model for their OS's, they get infected.
Which is why you need to continuously update the virus signatures. Not many years ago there was a flood of "macro viruses" for Word and Excel. Then Microsoft made a very minor change and asked people if they wanted to run the enclosed macros
The correct approach is to fix the real problem.
The PROBLEM here is that when Microsoft starts shipping its own anti-virus/spyware app, the other companies will all die.
Which means that within a couple years, the ONLY commercial option you will have for anti-virus on Windows will be
Now, to see how much effort Microsoft will be putting into that
Re:Nope, a good security model is "basic security" (Score:2)
Agreed. Now think a little. Most of spy and virusware is users mistake or downloading software on the net. What does for example spyware differently than usual program. How could system detect spyware if user installed spyware along with some software? By guessing? By counting executables? Spyware has to be corrected by approach that they inteded to go.
Their security sucks, true. Their patching speed is likespeed of hardcore snail race, true. Overexp
Re:Nope, a good security model is "basic security" (Score:2)
What's wrong with it ?
Re:Now THIS is +5 funny! (Score:3, Insightful)
Now that Symantec's business is challenged, NOW they come out whining and crying that Microsoft is playing bully, when r
Re:Now THIS is +5 funny! (Score:2)
Boo Hoo (Score:2, Insightful)
Re:Boo Hoo (Score:2)
Microsoft could make their software so secure that anti-virus programs are not a neccessity on Windows.
Re:Boo Hoo (Score:2)
No, they couldn't. Nor could anyone else.
You can't "secure" a device specifically designed to execute arbitrary instructions from arbitrary third parties - at least not for any meaningful definition of "secure".
Re:Boo Hoo (Score:2)
The need for anti-virus software is mostly a Windows-only thing, though.
Re:Boo Hoo (Score:2)
Only on Slashdot would you see a default installation of OpenBSD described as "usable" (in comparison to Windows, no less).
Re:Boo Hoo (Score:2)
Securing their software means making it impossible for viruses to infect Windows to begin with. This strategy accepts that viruses will happen, and tries to play clean-up, in a space where there is obviously already a great solution.
Re:Boo Hoo (Score:2)
That means making it impossible for an email package to run executables.
It means running as an unprivileged user by default.
It means not having write access to anything but your own sandbox by default.
It means all services being off by default and enabling what you need.
AOL users can still run AOL, Word or whatever so they aren't affected. Except even if they do download $CRAPWARE then the probably won't know enough to give it the rights to screw up thei
Re:Boo Hoo (Score:2)
Huh? (Score:4, Insightful)
Re:Huh? (Score:2, Insightful)
Its the users clicking on "Britney spears naked sex pictures.mpeg.exe" and actually expecting to stay safe.
Re:Huh? (Score:2)
Re:Huh? (Score:4, Funny)
Don't think so (Score:2)
However, this really does seem like a clear-cut case of product tying to me, though IANAL. And given Microsoft's market power in the workstation OS market, I would argue that it very well might be illegal.
Re:Don't think so (Score:2)
Re:Don't think so (Score:2)
They can fix their security model, but they cannot bundle software that competes with other firms with the OS. So your argument does not hold water.
Re:Don't think so (Score:2)
How ?
Re:Huh? (Score:4, Insightful)
The complaint isn't based on the idea that Symantec should have their business protected from all of Microsoft's actions. The complaint is based on the idea that Symantec should have their business protected from Microsoft abusing their unique position in the industry.
If Microsoft made a competing product and sold it separately, then this complaint would be meritless. It's because Microsoft are tying their competing product to Windows to get it on people's desktops whether they've chosen it or not.
This is Netscape all over again. If the DOJ had done their jobs and actually punished Microsoft for breaking the law, perhaps they'd stop doing it. But no, they gave Microsoft a slap on the wrist and let them do it all over again. Maybe the EU will do what the USA won't and actually protect people from the abusive, illegal actions of Microsoft.
Re:Huh? (Score:2)
Symantec is just going the way of Trumpet Winsock. Remember? Building a TCP/IP stack for windows didn't tur
Microsoft is being punnished (Score:2)
This is Netscape all over again. If the DOJ had done their jobs and actually punished Microsoft for breaking the law, perhaps they'd stop doing it. But no, they gave Microsoft a slap on the wrist and let them do it all over again. Maybe the EU will do what the USA won't and actually protect people from the abusive, illegal actions of Microsoft.
Here is the problem. When you break up a company, you immediately get a lot of market turmoil and the customer loses. Many people complained
gufaw (Score:2)
This is way off topic.
That isn't how I remember the AT&T breakup. And I don't think that should be a goal - this is about the market. The market will be fine. People will want stuff. Someone will provide it. Why do we need to still support tur
Removing the need for a product is different. (Score:4, Insightful)
The problem is that by competing with Symantic, the product is still needed, but Symantic will go out of business and Microsoft will end up being the single source for commercial anti-virus software for their desktop monopoly.
Which means that Microsoft can start ratcheting up the pricing for this
Either way, the customers lose. Unless they switch to Linux/Mac.
Re:Huh? (Score:2)
What? (Score:3, Insightful)
Why should the consumer be forced to buy a product from a second supplier when the original supplier is willing to add that feature on for free?
if Ford was the only car company (Score:5, Insightful)
Cry me a river.... (Score:5, Insightful)
Re:Cry me a river.... (Score:5, Informative)
NIS2005 is broken, as i Symantec support (Score:4, Informative)
Re:Cry me a river.... (Score:3, Interesting)
a) running in Normal mode (safe mode scanning no longer an option - are you KIDDING ME?)
b) MSIE security settings to allow execution of ActiveX controls etc on the local disk. That means that when a virus sets all of your IE security settings to "High" and won't let you reset them, you also can't run Norton Antivirus. Brilliant.
Maybe I'm wrong and there's some kind of other mode you can run NAV in that doesn't depend on the mshtml engine,
The price they pay for being monolitic (Score:5, Insightful)
Re:The price they pay for being monolitic (Score:3, Insightful)
It's not the companies, it's the customers. (Score:3, Insightful)
Which will leave the anti-virus customers with two options:
#1. Use Microsoft's anti-virus software and hope that Microsoft doesn't start increasing the price/actually maintains it.
#2. Move to Linux/Macs.
You're mistaken in the believe that Microsoft is "tightening down" anything. Their products will still be as vulnerable, but now their customers won't have any other vendors for competing anti-virus apps.
Re:It's not the companies, it's the customers. (Score:2)
Just like all the third party firewall vendors went out of business.
A different sort of market (Score:2)
Nonsense. No more than eg: Avast's free (and good!) virus checker is going to impoverish Symantec or McAfee.
Virus checkers are an example of a product where there is zero (or even negative) network effect. Unlike most other markets where M$ has basically taken over by giving freebies, there is no disadvantage to running a different brand of checker if it actually does a better job. The job itself is important, an
Re:The price they pay for being monolitic (Score:2)
Funny to mention these two in one sentence.
Microsoft has been tightening down since the first DOS virus came around.
And a whole industry sprung up based on their technology model of leaving holes.
I think it is a dangerous thing when they are alowed to build their own anti-virus software.
They should instead concentrate on fixing the holes.
Microsoft would have an advantage that is unfair by definition.
Re:The price they pay for being monolitic (Score:2)
To put it another way, it is MS using a monopoly position in one market (OS) to leverage a monopoly in another market (security). They have already been tried and convicted twice because of this behaviour.
If they were making Vista secure by design, this wouldn't be an issue. As it
Re:The price they pay for being monolitic (Score:2)
Of course it's not free. They are simply baking it into the cost of Windows, so that they take over another middleware market by shipping it with 95% of all PCs. You might argue this is something that should "naturally
Re:The price they pay for being monolitic (Score:2)
Then MS announces their free software:
2. Windows: 120$ + "free" antivirus: $0 + Symantec: $20 = 140$
People realize they don't need symantec:
3. Windows: 120$ + "free" antivirus: $0
And since we just took over a profitable market:
4. Profit
This example falls apart as soon as we remember that those "addons" to Windows don't actually raise the price.
Comment removed (Score:3, Insightful)
Well, the day has finally arrived (Score:5, Funny)
MOD PARENT UP (Score:2)
Just bad business model (Score:5, Funny)
Both are crooks (Score:4, Interesting)
M$FT, well they will have no ensure their products are vulnerable if they expect to sell AV and anti keylogger/spyware software.
Bottom line, reminds me of "Alien versus Predator" trailer tagline: "Whoever wins, we lose"!
Re:Both are crooks (Score:2)
RTFA (Score:2)
RTFA. They're including the software in Windows.
And M$? Are you twelve?
They're still crooks (legally - they're a monopoly) but it's best you actually use illegal things they've done to point that out rather than making shit up.
Why now? (Score:2, Insightful)
If it were integrated ... (Score:5, Insightful)
Any OS maker has the right - indeed, the responsibility - to secure their system. Integrating security mechanisms into Vista would be fine, not unlike adding iptables to the Linux kernel or requiring an admin password for all security-related operations in Mac OS X. So if Microsoft were to give this away as part of Vista, they could virtually kill Symantec and I would have no problem with it. After all, Symantec has made a killing on compensating for problems in Windows, and fixing those problems is far from bad business.
But if Microsoft intends to charge for their security products, it's a scam. They'd have a vested interest in building only basic security into their OS, because enterprises will otherwise have no reason to buy the security add-ons. I hope Symantec wins this not because Microsoft's entry into this market is wrong, but because they've done it entirely the wrong and corrupt way.
Re:vaporware (Score:2)
MS has done this before. Remember all the people who were making pretty big money on selling various DOS defragmentation tools, etc., who bitched when MS essentially licensed o
Clever! (Score:2)
This is such a good idea! At least for this one, I hope Symantec wins.
This gives me some hope. (Score:2)
Why anti-virus is part of the OS (Score:5, Insightful)
A key function of an OS is to regulate, allocate, and manage the hardware and software resources of the machine. Controlling which chunks of code/processes/threads have access to which other chunks of RAM/filesystem/IO seems core to both an OS and to controlling malware.
well. if just symantec could create bug-free softw (Score:2)
Re:well. if just symantec could create bug-free so (Score:2)
http://www.avast.com/ [avast.com]
Look for Home Edition.
They also sell Professional solutions and server solutions (including L
I just don't get it... (Score:4, Insightful)
Re:I just don't get it... (Score:2)
Damned if you do, Damned if you dont. (Score:3, Insightful)
A - Do nothing and get blamed for being insecure.
B - Do something, and get accused of illegal practices.
Re:Damned if you do, Damned if you dont. (Score:3, Interesting)
It's the most obvious conflict of interest: MS sells a buggy product, then sells another product that patches up some of the bugs.
Interesting... (Score:5, Insightful)
Heck, I remember running Microsoft AV in Windows 3.1/Dos 6.2 days, cleaning the Form virus off various floppy disks. (Don't Copy That Floppy anyone?)
* I don't mean Windows becoming more secure in the traditional sense of locking down, though XP SP2 is a big step up, I mean the manufacturer of the product (Microsoft) providing alternate means of protection without the need for 3rd party products.
Symantec doesn't want any competition? (Score:2)
No sympathy for symantic, but... (Score:5, Insightful)
Good riddance (Score:2)
But
Why pay for protection, i want it from the get go! (Score:2, Interesting)
I'm sorry Symantec, but i don't think they're trying to pull the wool over anyone's eyes and get away with a monopoly. I'd say they are trying to get their act together and get past their notoriety for sucking at security.
Why pay for Norton when it can't find viruses that i need it to find? I'm sorry bu
Windows OneCare? (Score:3, Funny)
(wonder what Symantec means in other languages?)
Interesting...... (Score:2)
Re:Interesting...... (Score:2)
..in other news. (Score:4, Funny)
If I was the CEO of symantec.. (Score:4, Funny)
Symantec CEO: Hi Bill how are you today!
Bill: Very good what can I help you with.
Symantec CEO: Bill I will cut to the chase I want you to stay out of the security market.
Bill: Nope we are going to kill Symantec.
Symantec CEO: Ok if you want to be like that we are going to release a immediate update to our suite on monday. With this update we are going to bundle a copy of the new version of Open Office.
Bill: Ok we will take it off the list, have a very fine day, how about a all
expenses paid trip to bermuda.
These CEO's just don't know how to fight fire with fire.
Re:As a Microsoft hater I still have to root for t (Score:2)
I agree, there is a difference to integrating a web browser into the OS to kill Netscape vs. Adding some security protection to their OS. It is like when XP came out and people cried foul because it added CD burning support and was said it was to kill off adaptec CD Record, No accessing the hardware is the OS's Job I am supprised it took that long for MS to add it to windows. The same for security, customers are complaining about how insecure windows is, and if they tell there customers we
Re:Viruses != Bug (Score:2, Flamebait)
Although this is Slashdot and there is a very simple rule here, anything MS does is bad. Anything that happens on Windows is MS' fault, irregardless if it is true or not.
I am a Linux supporter but the double standards on this site makes me sick. You hear a story about a company leaving Windows for Linux, well dontcha know thats cause Windows sucks so much.
But the second a st
Make, sure. Sell, no. (Score:2)
* MS sells an OPTIONAL AV protection utility.
* MS continues to allow the OS itself to be vulnerable.
* (perhaps, MS actually writes a virus that affects windows...)
* MS sells more AV software demonstrating that it keeps people's PCs "safe."
Re:Could Symantec open source their software (Score:2)
Re:Cynical gits! (Score:2)
Re:Makes sense to me (Score:2)
When it's MS squashing a big one suddenly we'll get pro-active government involvement. Instead of some reactionary stance of 'we'll see if you go out of business first, and if you do, then we'll give you grounds to file' (because shut-down businesses have lots of cash to sue mega corporations.)
I say let them squash symantec, and then because it will have
Re:This is Symantec we're talking about here (Score:2)
Of course the M$ solution will be as well written as the cause of the problem (Windows) and will be worse. I have no faith in M$ to do anything right, based on history, why would anyone?