Sunday, July 17, 2005

Fed Up With Your PC's Problems? Throw It Away

I had previously posted an article that noted how users, fed up with spy ware, viruses etc. were giving up on their PC's. Now, according to the New York Times, the disgusted users are buying new cheap PC's rather than trying to fix infected machines.

July 17, 2005
Corrupted PC's Find New Home in the Dumpster
By MATT RICHTEL and JOHN MARKOFF
SAN FRANCISCO, July 15 - Add personal computers to the list of throwaways in the disposable society.

On a recent Sunday morning when Lew Tucker's Dell desktop computer was overrun by spyware and adware - stealth software that delivers intrusive advertising messages and even gathers data from the user's machine - he did not simply get rid of the offending programs. He threw out the whole computer.

Mr. Tucker, an Internet industry executive who holds a Ph.D. in computer science, decided that rather than take the time to remove the offending software, he would spend $400 on a new machine.

He is not alone in his surrender in the face of growing legions of digital pests, not only adware and spyware but computer viruses and other Internet-borne infections as well. Many PC owners are simply replacing embattled machines rather than fixing them.

"I was spending time every week trying to keep the machine free of viruses and worms," said Mr. Tucker, a vice president of Salesforce.com, a Web services firm based here. "I was losing the battle. It was cheaper and faster to go to the store and buy a low-end PC."

In the face of a constant stream of pop-up ads, malfunctioning programs and performance slowed to a crawl or a crash - the hallmarks of spyware and adware - throwing out a computer "is a rational response," said Lee Rainie, director of the Pew Internet and American Life Project, a Washington-based research group that studies the Internet's social impact.

While no figures are available on the ranks of those jettisoning their PC's, the scourge of unwanted software is widely felt. This month the Pew group published a study in which 43 percent of the 2,001 adult Internet users polled said they had been confronted with spyware or adware, collectively known as malware. Forty-eight percent said they had stopped visiting Web sites that might deposit unwanted programs on their PC's.

Moreover, 68 percent said they had had computer trouble in the last year consistent with the problems caused by spyware or adware, though 60 percent of those were unsure of the problems' origins. Twenty percent of those who tried to fix the problem said it had not been solved; among those who spent money seeking a remedy, the average outlay was $129.

By comparison, it is possible to buy a new computer, including a monitor, for less than $500, though more powerful systems can cost considerably more.

Meantime, the threats from infection continue to rise, and "the arms race seems to have tilted toward the bad guys," Mr. Rainie said.

The number of viruses has more than doubled in just the last six months, while the number of adware and spyware programs has roughly quadrupled during the same period, said Vincent Weafer, a senior director at Symantec, which makes the Norton computer security programs. One reason for the explosion, Symantec executives say, is the growth of high-speed Internet access, which allows people to stay connected to the Internet constantly but creates more opportunity for malicious programs to find their way onto machines.

Mr. Weafer said an area of particular concern was infections adept at burying themselves in a computer system so that the cleansing programs had trouble finding them. The removal of these programs must often be done manually, requiring greater technical expertise.

There are methods of protecting computers from infection through antivirus and spyware-removal software and digital barriers called firewalls, but those tools are far from being completely effective.

"Things are spinning out of control," said David Gelernter, a professor of computer science at Yale.

Mr. Gelernter said his own family's computer became so badly infected that he bought a new one this week. He said his two teenage sons were balking at spending the hours needed to scrub the old one clean of viruses, worms and adware.

Mr. Gelernter blames the software industry for the morass, noting that people are increasingly unwilling to take out their "software tweezers" to clean their machines.

Microsoft executives say they decided to enter the anti-spyware business earlier this year after realizing the extent of the problem.

"We saw that a significant percentage of crashes and other problems were being caused by this," said Paul Bryan, an executive in the company's security business unit. Windows XP Service Pack 2, an upgrade to the latest Windows operating system that has been distributed to more than 200 million computers, includes an automated malware removal program that has been used 800 million times this year, he said.

At least another 10 million copies of a test version of the company's spyware removal program have been downloaded. Yet Microsoft executives acknowledged that they were not providing protection for people who have earlier versions of the company's operating system. And that provides little comfort for those who must navigate the perils of cyberspace.

Terrelea Wong's old computer now sits beside her sofa in the living room, unused, except as a makeshift table that holds a box of tissues.

Ms. Wong, a physician at Kaiser Permanente Medical Center in South San Francisco, started getting a relentless stream of pop-up ads a year ago on her four-year-old Hewlett-Packard desktop computer. Often her entire screen would turn blue and urge her to "hit any key to continue." Sometimes the computer would freeze altogether.

After putting up with the problem for months, Ms. Wong said she decided last November that rather than fix her PC, she would buy a new one. Succumbing to the seduction of all the new bells and whistles, she spent $3,000 on a new Apple laptop.

She is instituting new rules to keep her home computer virus-free.

"I've modified my behavior. I'm not letting my friends borrow my computer," she said, after speculating that the indiscriminate use of the Internet by her and her friends had led to the infection problems.

Peter Randol, 45, a stockbroker for Charles Schwab in Denver, is at his wits' end, too. His family's four-year-old Dell computer has not been the same since last year when they got a digital subscriber line for high-speed Internet access. Mr. Randol said the PC's performance has slowed, a result he attributes to dozens of malicious programs he has discovered on the computer.

He has eliminated some of the programs, but error messages continue to pop up on his screen, and the computer can be agonizingly slow.

"I may have no choice but to buy a new one," he said, noting that he hopes that by starting over, he can get a computer that will be more impervious to infection.

Buying a new computer is not always an antidote. Bora Ozturk, 33, who manages bank branches in San Francisco, bought a $900 Hewlett-Packard computer last year only to have it nearly paralyzed three months ago with infections that he believes he got from visiting Turkish news sites.

He debated throwing the PC out, but it had pictures of his newborn son and all of his music files. He decided to fix it himself, spending 15 hours learning what to do, then saving all his pictures and music to a disk and then wiping the hard drive clean - the equivalent of starting over.

For his part, Mr. Tucker, the Salesforce.com executive, said the first piece of software he installed on the new machine two weeks ago was antivirus software. He does not want a replay of his frustrations the last month, when the attacks on his old machine became relentless.

"It came down to the simple human fact that maintaining the old computer didn't pay," he said.

Friday, July 15, 2005

Dealing with Cookies

Walter Mossberg's article is an "Everything You Want To Know About Cookies" type of piece and I highly recommend that you read it.

Despite Others' Claims,
Tracking Cookies Fit
My Spyware Definition
July 14, 2005; (Wall Street Journal Online)

Suppose you bought a TV set that included a component to track what you watched, and then reported that data back to a company that used or sold it for advertising purposes. Only nobody told you the tracking technology was there or asked your permission to use it.

You would likely be outraged at this violation of privacy. Yet that kind of Big Brother intrusion goes on every day on the Internet, affecting millions of people. Many Web sites, even from respectable companies, place a secret computer file called a "tracking cookie" on your hard disk. This file records where you go on the Web on behalf of Internet advertising companies that later use the information for their own business purposes. In almost all cases, the user isn't notified of the download of the tracking cookie, let alone asked for permission to install it.

Luckily, the leading Windows antispyware programs can detect and remove these tracking cookies. It is the best defense a user has against this tactic.

Now, though, some of the companies that place these files on your hard disk are complaining about that defense. Some are urging the antispyware software companies to stop detecting and removing tracking cookies. They assert that the secret placement of these tracking mechanisms is a legitimate business practice, and that tracking cookies aren't really spyware or aren't harmful.

Unfortunately for consumers, this twisted reasoning is having some impact. In the most notable case, Microsoft disabled the detection and removal of tracking cookies when it purchased an antispyware program from a small company called Giant and turned it into Microsoft Windows AntiSpyware. That is a big reason why I can't recommend the Microsoft product, which still is in the test phase but is available for anyone to download.

Microsoft says it still is evaluating how to treat tracking cookies in the program's final release. I believe it is important for consumers to know who is on their side right from the start and who may be being swayed by companies that do things to your computer without telling you.

The antispyware program I currently use and recommend, Spy Sweeper from Webroot Software, still detects and removes tracking cookies. So does another antispyware program derived from some of the same computer code as the Microsoft product -- CounterSpy, by Sunbelt Software. I haven't tested the latter program, but it has received good reviews elsewhere. There are other antispyware programs as well that still treat tracking cookies as spyware.

To understand the tracking-cookie issue, you have to know something about cookies overall, and you have to know what spyware actually is.

Cookies are small text files that Web-site operators -- and third-party companies that insert ads into Web sites -- place on a user's computer. Many types of cookies are harmless or even helpful. For instance, a cookie might help a Web site remember your preferences for what news topics you chose to see. With your permission, it might store your login information, so you don't have to type it in each time you visit a particular site. Antispyware programs aren't designed to detect or remove these helpful cookies.

Tracking cookies shouldn't be confused with these other cookies. They have no user benefit except the vague promise that the ads you get as a result may be better tailored to your interests.

What is spyware? There are many definitions, but here is mine, in two sentences. Spyware -- and a related category called adware -- is computer code placed on a user's computer without his or her permission and without notification, or with notification so obscure it hardly merits the term. Once installed, spyware and adware alter the PC's behavior to suit the interests of outside parties rather than those of the owner or user.

Examples of spyware and adware include programs called "browser hijackers," which reset the home page or search engine used by your browser so the user is diverted to the sites of the spyware and adware companies or their clients. Others record your activities and report them to outside parties. Still others push ads in your face, even when you aren't using the Web.

Some tracking-cookie purveyors say their cookies aren't really spyware because they aren't full-fledged programs and they aren't as outrageous as spyware programs like "key loggers," which record and report every keystroke you enter. Others argue that the companies don't collect personally identifiable data, only aggregate data from many users. To me, tracking cookies clearly meet the obvious definition of spyware.

Rather than trying to legitimize tracking cookies with pressure and marketing campaigns, I suggest that, if they really believe tracking cookies are legitimate, the companies that use them simply go straight. They should ask a user's permission to install the cookies, pointing out whatever user benefits they believe the cookies provide. They might even offer users compensation for allowing tracking cookies on their machines.

Until that happens, here is my advice: If you don't like the idea of tracking cookies, run an antispyware program that detects and removes them, along with all the other indefensible computer code some companies think they have the right to install. After all, it is your computer.