Tech Bytes: Beware of malware, lawyers and elves - Action News
Home WebMail Sunday, November 17, 2024, 07:27 AM | Calgary | 6.9°C | Regions Advertise Login | Our platform is in maintenance mode. Some URLs may not be available. |
Tech Bytes: Beware of malware, lawyers and elves
Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

Beware of malware, lawyers and elves

by Saleem Khan, CBC News Online

Have you ever wondered whether you should click on or download some new piece of software you or your friends have found on the internet? It's probably worth paying attention to that nagging voice in the back of your head.

Dave Marcus, a senior strategist at security software vendor McAfee Inc., was in Toronto on Monday, and we discussed the increasing sophistication of malware authors the people who make things like computer viruses.

Marcus explained that as the bad guys are becoming more sophisticated and professional in their approach, they're also adopting techniques more often used in the corporate world.

"Do you know what the difference between malware and adware is?" Marcus asked rhetorically. "A lawyer a lawyer and an end-user licence agreement."

Criminals have been known to wrap difficult-to-remove malware in an attractive software package, dressed up with all of the bells and whistles that you might expect of a legitimate piece of software, including an end-user licence agreement or EULA. Buried in the reams of text if anyone bothered to read it instead of just clicking the "Accept" button people might find clauses in which the user grants permission for the computer to be used for any purpose the criminal might choose.

These days, that might include a line that allows the software to use the computer to distribute spam e-mails touting any number of products.

I remember talking to a worker at a prominent computer security company nearly 10 years ago, who told me about a hilarious program that featured elves dancing onscreen as they sang a tune. People were passing the tiny piece of software around to entertain one another with the comical characters and the tune that accompanied them.

It was only after scores of people had already installed the program that the company's computer network became bogged down and they realized they had infected their machines with a piece of malware.

That was a decade ago but the capacity for criminals to exploit human social behaviour is not to be underestimated. If they can get the security experts, the rest of us should be on guard.

So exercise caution and watch out for the lawyers and the singing and dancing elves.

« Previous Post |Main| Next Post »

This discussion is nowOpen. Submit your Comment.

Comments

bob

Toronto

Again this really isn't a computer problem...this is a Microsoft Windows problem. Most Windows users run their PC's from a privileged "administrative" user account and do not make use of unprivileged "restricted" accounts. Also, Microsoft makes it a pain in the ass to switch between privileged and unprivileged accounts so most users don't bother.

Microsoft's older desktop operating systems (Win 95/98/ME) gave everyone who touched the machine full administrative privileges.

That's a major reason why every single home Windows computer I've ever seen...and I've seen hundreds...has some malware (or crapware) installed on it.

In the Unix/Linux world, running your machine from and administrative (root) account is a "no no" and most versions of Unix/Linux issue dire warnings to you about operating your machine from a full-privileged user account...so you don't do it. They also make it relatively easy to switch between user accounts.

If (and that's a big "if") some malware got onto a Unix/Linux machine at the worst a user profile might get hosed...but not the entire system!

I'm using GNU/Linux because in the free software world there are no "End User License Agreements" that give all the rights to the software developer. The GNU General Public License gives me rights...specifically the "four freedoms"...the right to use the software for any purpose, the right to study the software code to find out what it's doing, the right to copy the software so I can help my community and the right to change the software and release my modified software to the public.

Posted June 16, 2007 04:19 PM

mt

Ottawa

Bob:
There are ways that security could be improved on Windows systems. But I don't think that all the blame can be dropped on Microsoft. Malware is almost entirely a user problem. There is no malware in existence that doesn't require multiple interactions with the user before it can have its way with the system. The first sentence of this article highlights the real problem: "Have you ever wondered whether you should click on or download some new piece of software you or your friends have found on the Internet?" The simple answer to this problem: No, you should not click on it! People seem to ignore the fact that all software available for download is available because someone wants to make money. They either make money by getting you to pay for it, or they put ads in it, or they use your system for their own purposes. If a link says 'Free', you need to ask yourself why it is free! Yes, Open-Source software is free of this problem, but for the average user open-source software is simply not relevant. Grandma isn't going to hunt down 'the best' Linux version, download the ISO, burn it to DVD and then install it, just so that she can have a desktop that functions exactly like Windows. And if she does get through all that, she has effectively eliminated her ability to use any sort of tech support. If she has trouble with her Internet connection, her ISP will say Sorry, we dont support Linux. Shell get the same answer if she trouble installing a new printer. Beyond that, is little Billy going to question if hes found open-source when his search brings him to an ad for a new screensaver loaded with garbage? Improving Windows is certainly a necessity and the Unix example of avoiding admin accounts is a great way to go. But the best solution to Malware is user education. People need to stop looking at the Internet as a vast repository of free stuff and recognize that there is usually a reason why someone is willing to give away their hard work.

Posted June 18, 2007 12:28 PM

Garet

Winnipeg

Too bad it doesn't give you the "right to ease of use", which is more important than those other 4 combined, as far as the general public goes.

Posted June 18, 2007 01:29 PM

« Previous Post |Main| Next Post »

Post a Comment

Disclaimer:

Note: By submitting your comments you acknowledge that CBC has the right to reproduce, broadcast and publicize those comments or any part thereof in any manner whatsoever. Please note that due to the volume of e-mails we receive, not all comments will be published, and those that are published will not be edited. But all will be carefully read, considered and appreciated.

Note: Due to volume there will be a delay before your comment is processed. Your comment will go through even if you leave this page immediately afterwards.

Privacy Policy | Submissions Policy

Story Tools: PRINT | Text Size: S M L XL | REPORT TYPO | SEND YOUR FEEDBACK

World »

302 Found

Found

The document has moved here.

more »

Canada »

302 Found

Found

The document has moved here.

more »

Politics »

302 Found

Found

The document has moved here.

more »

Health »

302 Found

Found

The document has moved here.

more »

Arts & Entertainment»

302 Found

Found

The document has moved here.

more »

Technology & Science »

302 Found

Found

The document has moved here.

more »

Money »

302 Found

Found

The document has moved here.

more »

Consumer Life »

302 Found

Found

The document has moved here.

more »

Sports »

[an error occurred while processing this directive]302 Found

Found

The document has moved here.

more »

Diversions »

[an error occurred while processing this directive]
more »