[Mimedefang] OS wars... [was Viruses: Bounce or Discard?]

[David F. Skoll]

On Mon, 29 Sep 2003, Peter P. Benac wrote:

>     Who are you going to collect this $0.10 from?

The owner of the machine that sent the virus.  That's extremely easy
for ISP's to determine -- they just check their RADIUS logs.

> Am I to blame if someone send a virus and uses my e-mail address
> in the From: Field.

Of course not, which is why it would be based on the machine.

> Who is to pay for the software that will be required to
> calculate the per virus charges and then bill my customers?

If you track viruses by originating IP address (which costs nothing --
use MIMEDefang :-)) and then scan your RADIUS logs, you can pull
out all the required information.

>     It seems to me demanding that a Vendor who charges $100-$300.00 per copy
> of an OS make their software more secure is a much more feasible solution.

No, it is not.  Until people actually pay the true economic cost of their
choices, there's no incentive to change.

>     After all if GM, Ford, or a dozen other automobile manufactures produced
> a car with the same number of "BUGS" in it would it be your responsibility
> to pay to have them fixed or the vendors?

If I ignored a Ford recall notice and drove a dangerous machine, then it
would be partly my responsibility.

> If your Entertainment Center were
> as buggy would it be your responsibility to pay to have it fixed or the
> vendors.

If my Entertainment Center caused unwanted RF interference to my neighbours,
you can bet the FCC would demand that I fix it or get rid of it.

> Tell me why Unix can have less holes then M$.

That's not the point.  If my Linux box starts propagating viruses and costing
other people money, then my ISP has the right to bill me.

>    Stop blaming the masses and blame who is really at fault.

I'm not blaming the masses.  Read my other postings about stolen goods
and counterfeit money.  Until Microsoft customers pay the true economic
cost of the software they use, they will have no incentive to pressure
Microsoft.  And Microsoft will not listen to pressure unless (1) it
comes from their customers and (2) has a measurable impact on their
revenue.

Regards,

David.