Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

people pick on Microsoft when they do the same thing Google does, just because they suck at it. This goes for scores of things. Lesson: don't suck at what you're trying to do, then you'll be treated specially.

www.google.com/search?&tbm=isch&q=google+chrome+malware+page



It doesn't help Microsoft that they have been beating their own drum about the "superior" malware detection performance in Internet Explorer, as compared to other browsers.

I already pointed out months ago that this was mostly an illusion due to their greater amount of false positives: http://www.morbo.org/2011/08/note-on-malware-detection-perfo...


Right, their superiority comes from flagging just about anything as dangerous. Their whole approach to security seems to me like they're putting lipstick on a pig. You can't go two seconds without Windows or IE throwing up some security warning dialog box. Dialog boxes aren't security. Throw enough of them at a user frequently enough and sooner or later the user just gets frustrated and disregards them. Then you have users just clicking through every time and eventually you actually do end up with a virus.

Instead of throwing up more dialog boxes or making them look prettier or more noticeable or just different they actually need to address the security of their products. It seems like they're just being stubborn and instead of rewriting what needs rewriting they wrap every security hole with new, ever more annoying dialog boxes with every major release.


SmartScreen addresses the security 'hole' that is the user itself. I'm curious about what you are really asking them to address here? I'm not seeing a solution other than for the OS to only run signed code. What OS is secure from arbitrary executables that the user chooses to run?

I agree that it is annoying, but I'm very interested to hear what they should be addressing here.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: