Flaws threaten Microsoft

SEATTLE — Microsoft Corp.'s offer this week of cash bounties for informants who help it collar virus-writers reflects more than just an escalation of the war on those who would exploit the dominant power in software.

The campaign reveals just how much of a threat to Microsoft's bottom line security flaws now represent.

When the Blaster worm hobbled hundreds of thousands of computers around the world in August — only the latest plague to exploit a flaw in Windows operating systems — it also hurt Microsoft's ability to book new contracts with corporate customers.

For the first time, it seemed, flaws in Microsoft's software were translating into flaws in the company's business model.

"It's now starting to move from being a problem that they used to hear anecdotally to a problem they can now measure the impact of," said Michael Cherry, an analyst with Directions on Microsoft, an independent research firm.

The cost of patching up Windows computers, for instance, is diverting money from tech budgets that might otherwise have been earmarked for new software contracts, he said.

In its latest quarterly results, Microsoft said revenue from multiyear contracts dropped $768-million (U.S.) from the previous quarter. The drop in so-called "deferred revenue" — money received for contracts that will be counted toward its earnings over time — was about $450-million lower than the company anticipated.

Some of that was due to overly optimistic projections, said chief financial officer John Connors. But another reason, he said, was that Microsoft's sales people were so busy helping corporate clients shore up their networks that they could not close new deals.

Even before the Blaster attack, security was gnawing at Microsoft's stature. It had been cited among the reasons that various government agencies in the United States and abroad have become more serious about adopting alternatives such as the open-source Linux operating system.

Security, simply put, is beginning to play a larger role in decisions about what software companies buy.

Boscov's department stores are in the process of switching from Microsoft software on many of its servers to Linux-based offerings provided by IBM Corp. Harry Roberts, chief information officer for Boscov's, a regional chain based in Reading, Pa., said cost was by far the biggest reason.

But the company also had been hit hard by the Nimda worm in 2001, causing about $50,000 in staff time to repair damage to the network, he said. "We do have a bad taste in our mouth."

Analysts say Microsoft's software is targeted most by hackers and virus writers because it is so prevalent. But that's of little consolation to customers angry about the persistent security concerns.

"When enterprises have these big problems, they're very leery," said John Pescatore, vice president for Internet security at the Gartner consulting firm. That wariness could prompt companies to delay software upgrades from every third to every fourth year, for example, a threat for Microsoft. "That's what kills software companies," he said.

After the Blaster attack, Microsoft issued bulletins for another five critical flaws in versions of Windows. And it was not the only Microsoft-centric Internet plague this year. The Slammer worm severely clogged on-line traffic in January.

Mr. Pescatore likened the recent problems to the situation two years ago, when the Code Red and Nimda viruses exploited flaws in Microsoft software. The network pain produced by the twin scourges prompted Microsoft chairman Bill Gates in January 2002 to identify security as the company's top priority.

Among the recent steps Microsoft has taken to improve security is its announcement that it will have a free update to its flagship Windows XP desktop operating system next year. The improvements are to include disabling certain features that can allow hacker break-ins. The upgrade, or service pack, will also include an improved firewall.

As it adjusts, the challenge for Microsoft has been to alter its mind-set — from an emphasis on winning new customers to the need to satisfy its now-huge existing customer base, said Joe Wilcox, an analyst with Jupiter Research.

"Microsoft needs to sit back and kind of rethink how to operate in more of a maintenance market," Mr. Wilcox said. "And what that really means is that customer satisfaction has to be the number one priority."

Z,

I have been all over the internet tonight: Kim Komando, Ad Alarm, Symantec, Norton, etc etc etc

Maybe you can help a frustrated FReeper:

Here's what happened. A couple of months ago, I noticed that my Norton no longer flashed the warning I was accustomed to seeing, "virus detected; please quarantine, or delete" (or whatever it said). This included periodic notices from the typical "Microsoft":

"Download this patch now", accompanied by an attachment. Which I knew not to open.

At about the same time, I stopped receiving emails from people who would call saying they had sent one to me (Locked up, apparently.) I called the local computer company. They ran Spybot, Symantec/Norton, and AdAware for two days. Finally told me they had isolated a virus that most programs had missed. He said there is a new virus which blocks anti-detection efforts, and actually 'disables' programs such as Norton. Two weeks later the technician returned, and I told him since his last visit, that I still get the typical Microsoft notice, I do not open it, nor does it show up as a virus. But it does not show up as previously with the red flashing warning. Again, he had said on the earlier visit that a new virus is out there which disables Norton and other detection methods.

He checked again and found nothing, but I am probably disabled from Norton insofar as I can ascertain. When I go to Kim Komando, Norton, et al, there is really not a place to enter a question and to receive a response via email.

I tried some external PC checks also such as Panda, but nothing showed up.

My question: Should I leave Norton and go to MacAfee or some other company?

ANY response, or sharing of my question with those having expertise, is MUCH appreciated!

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Flaws threaten Microsoft

It's greed that threatens Microsoft

IN MY OWN HOME