madison

Tough love for Microsoft users

Evan Leibovitch | May 15, 2000 12:00 AM PDT

Fool me once, shame on you
Fool me twice, shame on me
How many times do users of Windows need to be kicked in the head? It's asif we have a community of people who, upon discovery of "kick me" signsattached to their backs, do nothing -- and then complain when theyeventually do get kicked.

The first time was Melissa, and that should have been the wake-up call. Hello, is anyoneout there listening? Apparently not.

So, surprise of surprises, now we have Melissa's successor, the ILOVEYOU worm.To me it's simply no coincidence that ILOVEYOU shares its name with Barney's theme song.For you see, Microsoft Outlook (and other email software that'ssusceptible to ILOVEYOU) shares much with the Barney program. Eye candy is paramount.Short term visual stimulation means more than substance (which is OK ifyou're three years old, beyond that there's not much excuse). The emphasisis on the visual, and attention spans run on Internet time.

Until recently I believed that the blame was squarely on Microsoft'sshoulders. After all, when most people buy a computer, they don't knowthat they're being sold a box with gaping security holes.However, it appears that business users got hit harder by ILOVEYOUthan home users. While I received more than a dozen love letters Thursdaymorning, neither my wife nor my kids or any of their friends received anycopies at all.

It's not Microsoft that's at fault, nor the anti-virus companies thatcapitalize on such events yet, when all is said and done, are powerless toprevent them. It's the IT managers in businesses and governments, whose systems got hit, who should know better by now. The problem lies with the sheep who continue to usesuch dangerous products when credible and safer alternatives exist.

The heart of the matter
Compounding the problem, to me, is Microsoft's response -- nothing.The company denies blame or indeed the need to make any modifications to Outlook.In other words, they don't care.

I just wonder how many times Microsoft users will allow themselves to be kickedbefore they come to their senses.

The Outlook facility that allows you to run arbitrary pieces of emailedsoftware without asking you first is Evil, pure and simple. It allowsothers to send you software that does strange and unknown things to yoursystem. And even virus scanners can't pre-warn you of the dangers inside abundle of bits that's shipped to you in compressed or encrypted form. It'sno surprise that by the time any of the popular virus catching softwarewas modified to repel ILOVEYOU, it was too late. And you can counton anti-virus software's inability to repel the next one too.

Even when we have "legitimate" uses for the facility of running programsfrom email, I wonder whether the pain is worth the gain. In February TheRegister reported on such a "legitimate" download, from GoHip.com. In return for giving you theability to watch full-length movies, you must download a program that appends an ad to all youroutgoing email and changes your browser's home and search pages.Furthermore, these "enhancements" are hidden from you in such a mannerthat you need another download from GoHip to remove them.

Now, this ain't no fraud -- GoHip's customer service manager, David Spencer,pointed out that customers are made aware, up front, of what the software does before they download it.If this is what passes for legitimate use ofMicrosoft's (in)security features, I still must ask whether it is really worth the grief that wehave seen inflicted on email users the world over.

Simple solution
So what to do? Don't trust the sellers of a house who tell you that itlooks prettier without door locks. Stop buying products that sacrificeyour most basic security in favor of a fake veneer of sophistication. Ifthis is the kind of innovation Microsoft says would be endangered by itsbreakup, maybe that's reason enough for a split.

Microsoft continues to assert -- despite Department of Justice pronouncements -- thatits own concerns override those of its users. Yesterday it was Internetsecurity, today it's yourability to do simple system restores if security problems (or anyother reason) forces you to re-install.

If you'd like an even more detailed shopping list describing Microsoft'sdisrespect for its users, my old friend Bill Campbell (owner of a Washington-state Linux VAR), hasassembled a good one.Among other things, Bill discovers that when Microsoft itself wants avirus-free environment, it doesn'tuse Windows. Get the hint?

Later in the day when ILOVEYOU hit, a Unix-using friend posted thisto a mailing list:

M$ virus days are the best candidates for catching up on sleepwhen you don't have to worry about them while the unwashed massesare "down."
When I first read it I thought it was awfully pompous. But the more Ithink of it, the more I've come to believe that most of the people --especially business users -- who got kicked by this love bug, were justasking for it.

Ignorance is no longer an excuse... as if it ever was.

Could ILOVEYOU have been avoided? Let me know in the TalkBack below.

Talkback - Tell Us What You Think

Formatting +
BB Codes - Note: HTML is not supported in forums
  • [b] Bold [/b]
  • [i] Italic [/i]
  • [u] Underline [/u]
  • [s] Strikethrough [/s]
  • [q] "Quote" [/q]
  • [ol][*] 1. Ordered List [/ol]
  • [ul][*] · Unordered List [/ul]
  • [pre] Preformat [/pre]
  • [quote] "Blockquote" [/quote]

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

Facebook Activity