The antivirus paranoia culture
February 9th, 2009
Recently, I’ve spent some time looking at the computer section of Yahoo! Answers, and it’s a fascinating place from a sociological perspective. If the questions and answers popular there are indicative of what common attitudes and practices are among Windows and Mac users, then this is how a typical user operates:
- Install free antivirus software
- Install Limewire and use it to download copyrighted songs and movies as well as software cracks.
- Run as administrator all the time (no limited user account).
- Get infected with a virus or rogue.
- Ask for suggestions about a better antivirus.
- Consider that maybe paid antivirus solutions may be more effective than free ones.
- Consider that Frostwire may be safer than Limewire.
- Switch antiviruses.
- Switch P2P application.
- Get infected again.
- Try to remove the infection with MalwareBytes.
- Spend hours trying to remove infections with various other programs.
- Eventually give up and reformat entire drive without backing up files.
- Continue cycle.
There also seems to be a popular misconception that Windows’ malware problem has to do primarily with its popularity and not any flaw in security (like running as administrator by default all the time). So when a trojan (which requires user stupidity, not a flaw in the security of the operating system) appears for Mac OS X, the Windows users on Yahoo! Answers say “Aha! See? Macs get viruses too. They’re no more secure than Windows” and the Mac users on Yahoo! Answers say “Oh, no. What antivirus should I use to protect my Mac? I thought Macs were immune to viruses.”
I hope you see the problem here. Antivirus software companies may not be so nefarious as to actually create viruses (though maybe they do—we don’t have any irrefutable evidence either way), but they have definitely created a culture of paranoia and not just healthy fear.
Most computer users are paralyzed when it comes to security. They have no concept whatsoever as to what makes a computer secure or insecure. They just think “If I run ‘the best’ antivirus software, I can do whatever I want and my computer will be safe.”
Yet, I’d be willing to bet that most of these people would be better at spotting a fake valet before handing over the keys to their cars and would know better than to actively seek out burglars to give out their bank ATM cards and PIN codes to.
What can we do to turn around this culture of paranoia and turn it into proper, healthy fear properly channeled through education and good practice?
I used to be part of this culture, back when I was an exclusive Windows user. I got malware of some kind and panicked. And I thought if I just got a “better” antivirus and changed from Internet Explorer to Firefox that my security would be so much better.
It wasn’t until I got more familiar with the worlds of Mac OS X and Ubuntu that I realized privilege separation matters. Yes, it’s theoretically conceivable that malware could infect a limited user account if it were designed that way, but if it did and was detected in a short amount of time, then it could be easily removed. Malware as it is now thrives because it digs deeply into the Windows system files so that booting into safe mode or trying to use system restore to get rid of it isn’t enough. If you use a limited user account, no system files will be affected, and if malware were ever designed to affect a limited user account, you could just delete that account and carry on.
More importantly, the paranoia comes from a total lack of understanding about how computers become infected with malware. They have the same understanding of computer diseases that “doctors” had about human diseases centuries ago. It’s a bad humor. It’s punishment for doing something evil. It’s not germs you actually have to come in contact with.
A lot of malware comes in not through software flaws but through user flaws. Social engineering is a great way to get malware installed because Microsoft, Apple, and Linux developers can do nothing about it through better programming. If you can trick the user into installing “the codec you need to watch this video” or “this pirated version of iWork” or “this cool new software,” then any kind of built-in security goes out the window.
Couldn’t these users who suffer from such paranoia and ignorance save themselves a lot of heartache if they did a few simple things?
- Use a limited user account in Windows
- Take ten minutes to read up on social engineering and how not to be a victim of it
- Back up personal files regularly
- Use Norton Ghost or Acronis True Image to image a working installation so a reinstall wouldn’t take so long
- Install system security updates
The way a lot of people run their computers, it’s like having rampant unprotected sex and then getting an HIV test every six months. That won’t stop HIV! Get a condom! Computers have condoms too, even though Microsoft doesn’t make them very easy to put on.
The woman who dropped out of MATC after mistakenly buying a Ubuntu laptop from Dell
January 17th, 2009
I know I’m probably the millionth person to comment on this (is millionth even a word?), but I have only two things to say.
1. To the anti-Linux folks and tech “journalists” who blame this on Linux not being “friendly” enough for new users or being for only those who want to tinker with their computers, how exactly would Ubuntu (or any Linux distro) have been friendlier or easier to use in this case? Does Ubuntu have any control over the fact that Verizon gives you the impression its software is necessary to set up an internet connection? Or that Verizon’s CD provides Windows-only software for it? Does Ubuntu have any control over the fact that Microsoft has made Microsoft Office closed source and not made a Linux version? Does Ubuntu have any control over MATC’s requirements misleading people into thinking they need Windows when Linux will do just fine? Did this woman really have to drop out of college because of the laptop?
2. To the supposedly pro-Linux folks who feel the need to harass this woman through Facebook or whatever, shame on you. Should she have known better to research what computer she was buying before plunking down $1100? Sure. Is she an idiot? No. She’s just an idiot when it comes to computers, and I know a lot of otherwise brilliant folks who are idiots when it comes to computers (I was a computer idiot only five years ago myself). There’s no need to send hate mail her way when the people really at fault are the “journalists” who don’t actually do any kind of investigative reporting and rely solely on catchy headlines and misinformation to gain readership and website hits.
A friend of mine recently went back to school for interior design and previously had been a Mac user. Surprise, surprise—she got herself a Windows computer, because she knew AutoCAD wouldn’t run on her iBook. Somehow, though, I can’t picture WKOW 27 running a news story on Mac OS X forcing her to drop out of college because it doesn’t run AutoCAD, even if she had stuck with her iBook.
Edit: Here’s an example of a Mac user on Yahoo! Answers who is having trouble with the .exe file to set up her Belkin wireless router. Anyone going to run a news story on it? Doubtful.
Would Apple’s netbook be the next iPod?
December 10th, 2008
I remember back in 2003 when only a handful of early adopters in America were buying portable audio players. If I’m recalling correctly, some of the big players at the time were RCA and Creative, among others. Once 2004 rolled around and the 3rd-generation iPods came out, suddenly “everyone” I knew had an iPod. Soon, even armed with my Sandisk player, I had unknowing friends call my portable audio player an iPod. The iPod took over a growing trend and made itself a virtual monopoly in portable media devices.
In recent years, phones have been getting more internet-connected. Blackberries have been the standard for business travellers, but most everyday folks have had crappy no-name web browsers in their phones that can do only some very basic tasks. Suddenly, the iPhone came along, and now… well, not nearly “everyone” but it’s getting close to half of the people I know are getting iPhones or planning to get an iPhone when they can afford it. I had high hopes for the Google phone or the Blackberry Storm; however, all the reviews I’ve read of them have been mixed and make it sound as if the iPhone, despite its own flaws, cannot be beat for sex appeal to the masses.
Now we have these netbooks that are “popular” in the sense that early adopters are excited about them, but really very few people I know have netbooks let alone know of their existence. I bought an Eee PC 701, and I still love it but, like many netbook owners, know that the netbook has not reached its full potential. Some Linux users are optimistic, since most netbooks come with a Linux-preinstalled option, that netbooks could be the key to a Linux-for-home-user revolution of sorts. If that’s to happen, OEMs have to wake up and start making a netbook that is unreservedly the best. I’ve read literally hundreds of reviews of various netbooks, and with every review, there’s something seriously wrong. Some key is placed in the wrong place. The keyboard is too small. The sound is tinny. The processor is too slow. The battery life is too short. The Linux distribution it comes with is crippled.
Why is it so difficult? Really. If an OEM (Dell, HP, Acer, Asus, etc.) came out with a netbook that had these characteristics, I guarantee it’d blow the sales of the other netbooks out of the water:
- 92%-sized keyboard with important keys in the right places
- No weird side buttons for the touchpad
- Nice aluminum casing, no cheap plastic
- Sleeps when you close the lid, wakes when you open the lid
- Ubuntu-based Linux that takes advantage of the full Ubuntu repositories
- “Easy” interface that can easily (meaning a box that checked or unchecked, ticked or unticked) be changed to a more typical “advanced” interface
- 2- or 3-second boot time
- Definitely cheaper than the corresponding Windows option
- Battery life of longer than 4 hours
- Kernel supports 2 GB of RAM without user modification
- Ships quickly, no extended delays
Why is that so hard to find? Why does Dell’s Mini come with some weird architecture that isn’t compatible with the regular x86 .deb packages? Why does HP’s Mini-Note use a Via processor? Why does any netbook run with a crippled version of Xandros or with Linpus Linux? Trust me, OEMs, for your own financial good, fix these problems quickly and come up with an all-around great product, not just a sufficiently-good-for-early-adopters product.
If the rumors I’m reading are true and Apple may enter the netbook market soon, this could be another iPod coup. I don’t agree with all the design decisions Apple makes. In fact, I actually am opposed to Apple’s whole approach to user interfaces. I cannot deny, however, that Apple thinks out its decisions and tries to create what they consider a good user experience. And they know how to make their products sexy. See, I don’t mind having an ugly MP3 player that also has a radio, has a really long battery life, and costs half the price of an iPod. But I’m not most people. Most people would much rather have a sleek iPod that costs more, has a cool scroll wheel, and works with iTunes.
I’d love to see Linux get some real success among home users, but if there’s not a Linux netbook that I can unreservedly recommend to friends and family before Apple comes out with one, I’m afraid Linux may miss the boat on this one. Or, even if Apple doesn’t come out with a netbook exactly, if the current line of netbooks stays flawed, netbooks themselves may die out, and the iPhone may take over yet another niche.
How my own stupidity killed my Sansa Clip
October 3rd, 2008
So my last MP3 player (the much-lauded but ultimately disappointing Cowon iAudio 7) died because of a manufacturer error (even though Cowon claimed the repair was not under warranty). This time, I killed my MP3 player (my 2 GB Sansa Clip) with my own stupidity.
The long story
I love Ubuntu, and I keep coming back to it, but every now and then I get distro cravings and have to try something else. I hadn’t had a distro craving in probably over a year. I kept reading all these great things about Mandriva, though, and how well it works with the Eee PC 701.
So I tried downloading it to my bootable USB “key” (i.e., the Sansa Clip) and extracting the .iso the way I did for Ubuntu and eeeXubuntu. No go, though. I got a boot error of some kind (I think it was some busybox thing). When I read up online about how to install Mandriva on the Eee, I found out you have download some premade all.img file and install via FTP. So I dd‘ed the all.img to my Sandisk player, knowing all would be overwritten and thinking I could restore anyway. None of my Ubuntu adventures had affected the Sansa Clip adversely, so I wasn’t worried.
As a sidenote, Mandriva’s installer made me really appreciate the simplicity and speed of Ubuntu’s installer. The Mandriva installation took literally hours, and the first mirror I selected for doing the FTP install kept having trouble fetching packages (with no easy way of switching to another mirror). It also had this annoying Windows-like habit of asking you a question, doing some processes that took an hour or so to execute, and then asking you another question, and then doing more processes. Why can’t it just ask you all the questions up front and then do all the processes?
After Mandriva finally installed, I wasn’t that impressed, but I thought I’d at least give it a go (and I will). Even though resume from suspend worked with the prepackaged Xandros, I couldn’t get it to work with any *buntu flavor, and I’d heard it would work out of the box with Mandriva. Not so. When I try to wake up the computer with a keystroke, nothing happens. If I press the power button quickly, it looks as if it’s about to wake up but then shuts down completely. Very disappointing.
So my next task was to get my Sansa Clip back to its previous state. I realized that the all.img file I dd‘ed over was extremely small, so even though the Sansa Clip was officially 2 GB, it made my drive appear to GParted to be only a few MBs in size. GParted couldn’t recognize the full size, so I thought if I deleted the entire partition and created a new one, that’d be fine. But Mandriva’s GParted, for some reason, doesn’t let you create FAT32 or non-Linux partitions (I’m sure there are packages that could be installed that could add that support—I had no idea what those were).
For a quick fix, since it was nearby, I opened up my wife’s Macbook Pro and used the Mac Disk Utility to erase the Sansa Clip drive and format it as FAT. Bad move. The Disk Utility wiped it out completely, including the firmware!
So when I finally ejected the Sansa Clip and then tried to plug it into my Eee PC, it would not be recognized. It was totally dead. It wouldn’t turn on. It wouldn’t show a little display on the screen saying it was connected to a computer. fdisk -l on the Eee side also showed nothing connected. Same deal when I plugged it back into the Macbook Pro. And finally, same deal when I plugged it into my Windows PC at work.
The real shame of it is that it probably still works… or would work if I were able to get the firmware back on there, but without the firmware installed, the Sansa Clip doesn’t know when it’s connected to a computer, and I need to connect it to a computer to get the firmware installed.
It’s official: I’m a moron. Mandriva, I hope you appreciate all I went through to get you installed.
The short story
I erased the firmware off my Sansa Clip, and now it’s totally useless. Good thing it was cheap.
Why does Microsoft port Office to Mac?
September 30th, 2008
So I know Microsoft has recently been trying to counter-market Apple’s “I’m a Mac, I’m a PC” campaign with the Mojave thing, the senseless Seinfeld-Gates commercials, and the “I’m a PC!” declarations. Wouldn’t a simple tactic be just to discontinue porting Microsoft Office to Mac?
After all, I know there are people who use Internet Explorer-only websites and so have not been able to switch from Windows to Mac (now that the latest version of Internet Explorer for Mac is 5). If Microsoft stopped porting Office to Mac, that’d hurt Apple even more, wouldn’t it?
Well, I suppose they know what they’re doing. Maybe they’re worried about antitrust lawsuits or something. I’m no Gates or Ballmer.