Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Government Security United States

Let Big Brother Hawk Anti-Virus Software 405

Frequent Slashdot contributor Bennett Haselton writes with his idea for mass adoption of anti-virus software: "If the US government did more to encourage people to keep their computers secure — by buying TV ads to publicize free private-sector anti-virus programs, or subsidizing the purchase of anti-virus software — we'd all be better off, on average. That's not just idealistic nanny-statism, but something you can argue mathematically, to the point where even some libertarians would agree." Read on for the rest of Bennett's thoughts.

This requires a discussion of "positive externalities," which may seem pedantic to you if you remember the concept from econ class, in which case you can skim the next five paragraphs. When you buy anti-virus software, some of the benefits accrue to you — less risk of your data being lost to a virus, or of annoying spyware infecting your computer with pop-up ads — but some of the benefits also accrue to other people. Prior to anti-virus software being installed on your computer, your machine might have been infected and taken over by criminals who used it to send spam. Or it might have helped to propagate the virus to other people. (Note: I am using "virus" to incorporate related things like "worms" and not worrying about the distinction.) Or you might have thought there was a problem with your computer, not realizing the problem was caused by a virus, and wasted time calling the tech support line for your computer manufacturer or for some other product on your computer. (If the company charges for tech support, then you're paying the cost of your call rather than passing those costs on to others, but if the call is free, then the costs have to be passed on to the company and hence indirectly to their other customers.) When you install anti-virus software, the chances of all these things happening are reduced, and those are the benefits that accrue to others — positive externalities, in economics jargon.

The key assumption is that you can put a price on all of the positive externalities generated by a given person installing the anti-virus software. It's different for every person, but it always adds up to some value, something that is not microscopic, but also not fantastically larger than the purchase price of the anti-virus program. It's on the order of adding 1/100,000th of a penny's worth of value to the lives of 100 million other people, for a total positive externality of $10.

To see that this is a reasonable assumption, suppose that if I had a choice between living in a world where all 100 million other Internet users in the US had no anti-virus software installed (using round numbers to make things simpler), and living in a world where all of the other users in the US had anti-virus software installed, I would pay $10 more per year to live in the latter, counting only the benefits to me and not factoring in any altruistic desire to help protect fellow citizens. (I personally would pay a lot more than $10 because I use the Internet so much, but the average might be closer to $10. Also, what I'd really like is for more people in certain other countries to install anti-virus software — China comes to mind — but I'm leaving them out of this discussion because it would be harder for the US government to encourage that.) When everyone else in the US is using anti-virus software, the benefits are returned to me in various ways, such as it being easier for me to send and receive e-mail because there aren't so many botnet-infected machines sending spam. (This is independent of my decision as to whether to buy anti-virus software for myself or not.)

Now, once I've decided I'd pay $10 more to have all my fellow Americans install anti-virus software, I could draw a graph (while my friends are out snowboarding with their girlfriends) with "how many other US users have hypothetically installed anti-virus software" on the x-axis, and "how much would I pay to live in that world" on the y-axis. At the point on the graph where no other people have anti-virus software, I'm willing to pay $0 to live in that world. (Well, of course I'd pay a lot more than $0 to be alive in any world, but I'm comparing other worlds to that one, so I'm just using $0 as my baseline.) At the point on the x-axis where all 100 million other users have installed anti-virus software, I'm willing to pay $10 to live in that world instead. What does the graph look like in between those points? Well, I can assume it's upward-sloping — the more other people install anti-virus software, the better it is for me. I could also adopt the simplifying assumption that it's a straight line — so I would pay $3 to live in a world where 30 million other people have anti-virus software installed, $6 to live in a world where 60 million other people have it installed, etc. It's not really a straight line, because when the first 50 million Americans install anti-virus software, that still leaves 50 million others to get infected and do damage, but when the next 50 million install it, that has eliminated all the unguarded computers in the US, and made it a lot harder for viruses to spread, at least within our borders. In other words, the line representing the quality of life to me as a function of how many other people installed anti-virus software, would rise more slowly in the range 0-50 million than it would rise in the range 50-100 million. But as long as the curve doesn't make any sudden jumps — for example, I know that the 30-millionth person installing anti-virus software isn't suddenly going to make my quality of life go up by $1 — I know the curve generally has to rise smoothly. So for a really rough approximation I'll treat it as a straight line.

If the graph is a straight line with the value $0 when nobody else installs anti-virus software, and $10 when everybody else installs anti-virus software, then each additional user installing anti-virus software creates an additional benefit to me of 1/100,000th of a penny (so 1/100,000th of a penny, times 100 million, comes out to $10).

You may think it's ridiculous or meaningless to say that someone else installing anti-virus software can benefit me to the tune of 1/100,000th of a penny. I myself can't wrap my head around it. But I can use the necessary properties of the graph — that it starts at $0, ends at $10, must curve upward, and doesn't make any sudden jumps — to reason that it should be approximately true.

And then, if each other US Internet user derives an average of 1/100,000th of a penny's worth of benefit when you install anti-virus software, then the total benefit that you confer on other people by installing the software, comes out to 1/100,000th of a penny times 100 million, or $10. And that's not even counting all the spillover benefits to users in other countries each time an American installs anti-virus software, something that we could consider a kind of off-the-books foreign aid. (Even if we would really like for it to be reciprocated by all users in countries like China installing anti-virus software as well.)

This is actually not hard to reconcile with people's attitudes toward installing anti-virus software. It's recommended as something you should do not only for your own protection, but also as something you should do to be a "good Netizen" so as not to impose inconveniences on other people. If your installing anti-virus software only conferred about 1 penny's worth of total benefit on the rest of the world, nobody would bother exhorting you to do it as a kind of civic duty. On the other hand, if your installing anti-virus software conferred thousands of dollars' worth of good on the world (or, equivalently, not installing anti-virus software exposed the rest of the world to thousands of dollars' worth of risk or damage), then people would not only be exhorted to install it, it would probably be required by law, like functioning car brakes. The kind of pressure that we see today to install anti-virus software — gentle prodding but not outright compulsion — feels commensurate with a value between $1 and $100 of the benefits that a person confers on the rest of the world by installing it.

But this logic also means is that we are missing an opportunity to make everybody better off on average, by actually subsidizing the purchase of anti-virus software for some people who otherwise would not have bought it. Suppose each user confers $10 worth of positive externalities on other American Internet users when they install anti-virus software. Now first consider the case of an a program like Norton Anti-Virus which costs $40.

For anybody who personally values their own anti-virus protection at $40 or more, great — they'll buy the software, they get the value they want from it, and everybody else gets the positive externalities of that person's virus protection, for free. But consider the people who value the anti-virus software at somewhere between $35 and $40. With no government rebate, they won't buy the software.

But now suppose the government offers a $5 rebate (funded by a tax on all 100 million Internet users) to anyone who buys anti-virus software. Everybody who would have bought the software before, will obviously still buy it now that the government rebate has effectively lowered the price to $35, and now, all the people who value the software between $35 and $40 will buy it as well. For each person who purchases the software at the new price of $35, the following is true:

  • The person who bought the anti-virus software is better off — they valued the software at at least $35, and they got it for $35. (Otherwise, they wouldn't have bought it.)
  • The taxpayers who subsidized the purchase are better off. Each rebate cost the taxpayer one-hundred-millionth of $5. But when that user installed the anti-virus software, they conferred $10 worth of total benefit on all other Internet users in the US, so that benefits each Internet-using taxpayer one-hundred-millionth of $10. So they're ahead.

If this seems fanciful, we're still in the domain of standard economics textbook stuff. When positive externalities are involved, the free market by itself will usually not reach the optimal outcome; by adding in some government subsidies, you can achieve an outcome that leaves everyone better off than they were before (even after subtracting the cost of the taxes to fund the subsidies). Call them "subsidies even a libertarian could love." Steven Landsburg's books The Armchair Economist and More Sex Is Safer Sex, and Tim Harford's books The Undercover Economist and The Logic Of Life, explain the logic of externalities probably better than I can, and give other interesting examples. When I say "subsidies even a libertarian could love," consider that Landsburg once wrote that George W. Bush's tax plan was unfairly burdensome to the rich, because "it seems patently unfair to ask anyone to pay over 30 times as much as his neighbors." That's pretty, uh, libertarian. But even Landsburg has argued, in More Sex Is Safer Sex, that LoJack anti-car-theft devices should be heavily subsidized by the government, because they create positive externalities — when more people buy LoJacks, thieves are deterred from stealing everyone's cars, because there's no way to tell whether a particular car has a LoJack installed or not. To the extent that anti-virus software creates positive externalities, it should be subsidized as well.

A modified version of this logic applies even to free anti-virus programs like AVG Anti-Virus. AVG is only "free" if you don't count the costs of finding out about it in the first place, then downloading it, installing it, and leaving it running. All of these add up to costs that, for whatever reason, have led to many people choosing to run nothing at all, rather than to run AVG even though it's free. If the government ran a campaign announcing the rebates for purchasers of anti-virus software, they could also use the campaign to recommend certain free programs -- thus effectively offsetting the "costs" by providing a "subsidy" for those programs in the form of free advertising.

When I ran this past some people for comment, two respondents, Steven Landsburg and Esther Dyson, independently recommended versions of a popular alternative idea, which was to penalize people directly for spreading computer virus infections. Landsburg commented:

I certainly think there are huge externalities here, and they derive from the fact that idiots who don't know what they're doing insist on administering their own mail clients. I don't have a mail client on my machine precisely because I am one of those idiots and I don't want to be responsible for a virus grabbing my address book and running with it.

So I have long thought that mail clients should be taxed and/or (if it were technologically feasible) that individual users should be fined heavily if viruses spread from their machines (or send spam from their machines).

Esther Dyson suggested something similar:

One method to consider is — rather than subsidy — requiring the ISPs to post a bond for their customers and assume responsibility for their actions. They can ask their customers in turn either to buy an antivirus package, to sell one that the ISP will offer for free, or to post a bond guaranteeing that they know what they're doing and will do no harm. The ISP is then liable for the misbehavior of its customers and may forfeit the bond if some specified level of disruption is caused by its customers.

In theory, this works better than my idea because it precisely targets the undesirable behavior: We don't really want to penalize people for not running anti-virus software, we want to penalize people for not running anti-virus software and imposing costs on others as a result. It's not possible for 100 million people to charge one person 1/100,000th of a penny each for the inconvenience and risk that person creates by not installing anti-virus software, but it might be possible for one recipient of the virus to seek to punish the person who gave it to them.

However, I think this scheme would have more practical problems:

  1. You can only penalize the virus spreader if you know exactly who was responsible for passing it on to you. This works for old-school viruses that spread as e-mail attachments, but not for worms like Code Red that probe the network looking for other machines to infect — if you're infected as a result of a remote IP address probing your machine, it's unlikely that you would ever find out exactly when or how it happened, much less the owner of the IP address that infected you.
  2. If you found out that a friend spread a computer virus to your machine, you'd probably be under a lot of pressure from your friend not to turn them in.
  3. For people who did get taken to court for spreading viruses, there would be overhead costs associated with processing the case, over and above the actual fine that may be levied against the individual. (If the penalty happens outside the court system — for example by ISPs keeping the bond posted to them by a customer — at least some of those customers will probably feel wronged and sue the ISP, generating court costs either way.)
  4. If someone accidentally spread a virus to a large number of other machines, that could make their total liability far greater than what they could actually pay.

The idea of fining or otherwise punishing people for accidentally spreading viruses is something I've thought about too, but usually in a moment of venting. As Steven Landsburg dryly says, "Your solution (subsidized antivirus software) might be more effective, but mine would be more satisfying (to me)." I think the option of punishing people for propagating viruses is something that should be explored in more detail, but I can't offhand think of any solutions that would avoid the problems listed above. The fact is that anybody with an Internet connection has the potential to do enormous damage if their machine gets infected, and in most cases it would be too hard to track the harm back too them, and too harsh to make them pay the real cost of the damage.

On the other hand, the option of a government publicity campaign to get people to install anti-virus software — at least the free ones, which should be a no-brainer — is something that seems like it should start bringing benefits right away. Government advertisements for free programs would require the least amount of paperwork to set up, because all the government would have to do would be to produce the TV ads and buy the airtime. (Other proposals, such as subsidies for non-free anti-virus software, or paying people outright to install anti-virus software, would require more overhead to implement. That doesn't mean they shouldn't be tried, but go for the low-hanging fruit first.) Now, what the ads should look like would be a question for advertising experts, but I would really hammer home the point: "Go to this government website and we have a list of recommended FREE anti-virus programs. These are not 'free trials' for something you have to pay for later. They are FREE. If you're not using anything at all, at least go get one of these." Along a list of the non-free programs for people who want even more protection, and links to third-party reviews of those.

More generally, I think that government-funded action to encourage better computer security is something that has not been given enough consideration. I think this is partly due to hostility to anything that smacks of government intervention (because of, among other things, numerous times the US government has attempted to censor the Internet), and partly because of an assumption that the free market will provide the best solution by itself. But if the government is actually on the right side of an issue — the side of promoting better computer security — then there's no reason to be petty and foul up their campaign just because we're still resentful that they once tried to make the Internet into a no-cussing zone. Hey, if the government thugs start to care more about computer viruses than about Internet porn, then they're learning! Give them a pat on the head and help them get the word out! And meanwhile, economic theory predicts that because of the externalities problem, the free market by itself won't lead to the optimal number of people using anti-virus software or keeping their computers secure. That's precisely the situation where a government-funded push toward more computer security can bring everyone more benefits than it costs. If you wear a Ron Paul t-shirt, but you found out about free anti-virus software software from a state-sponsored TV ad, nobody has to know.

This discussion has been archived. No new comments can be posted.

Let Big Brother Hawk Anti-Virus Software

Comments Filter:
  • by godrik ( 1287354 ) on Wednesday May 06, 2009 @10:25AM (#27845351)
    that is securing operating systems and educating users so that they don't install viruses ? This can also be push forward with tax dollars and would be more useful IMHO.
  • Hmmph. (Score:3, Insightful)

    by Anonymous Coward on Wednesday May 06, 2009 @10:25AM (#27845357)

    Frequent Slashdot contributor Bennett Haselton writes with his idea for mass adoption of anti-virus software:

    Wow, somebody's buddy just got hooked up. Posting cretinous articles is one thing, posting a contributor's own cretinous musings is quite another.

    Here's an idea -- Let's assume for a second that the majority of business and government uses a specific family of operating systems from $MONOLITHIC_CORPORATION. Since that corporation is pocketting billions upon billions of dollars, then why not have them subsidize the ads?

    The burden should fall upon the corporations which support their operating systems which have been demonstrated to be gaping security holes which would make even the great Goatse prolapse with envy.

  • Nope (Score:5, Insightful)

    by Anita Coney ( 648748 ) on Wednesday May 06, 2009 @10:28AM (#27845391) Homepage

    "to the point where even some libertarians would agree."

    Maybe he meant to write librarians, but no true libertarian thinks that the government should purchase ads for McAfee and Symantec.

  • by Benanov ( 583592 ) <[brian.kemp] [at] [member.fsf.org]> on Wednesday May 06, 2009 @10:30AM (#27845417) Journal

    Going to have to agree with that.

    All this talk about positive externalities and encouraging large numbers of people to do something might be better served by the government requiring higher minimum security standards for operating systems and charge pigouvian taxes to software makers who don't meet those standards.

    Sadly this only works in the ideal world.

    Lobbyists would destroy it (to the point where Windows 95 would pass) and the only people who would be hurt would be Free Software authors and SMBs who don't have enough representation.

    FWIW most ISPs offer "free" anti-virus; most of the time it's McAffee or Norton. That and really virus scanners are a bandaid to poor security.

    They're effectively a blacklist (with some mostly ineffective greylist heuristics), and blacklists aren't really useful against continual new threats.

  • by postbigbang ( 761081 ) on Wednesday May 06, 2009 @10:34AM (#27845489)

    Although draconian, I say partition machines that are parts of botnets, those that distribute undeniable spam, and those that perform port probes. Yes, I know that spoofing makes that tougher, but it's a start so as to jolt people into taking responsibilities for their ownership in their own systems.

    Route around the bastards, I say.

  • by tomhudson ( 43916 ) <barbara.hudsonNO@SPAMbarbara-hudson.com> on Wednesday May 06, 2009 @10:34AM (#27845503) Journal

    It's worse -it's a disguised bail-out of Microsoft and anti-virus vendors.

    It would help keep the idea alive that it's okay to sell virus-prone software. Why not use the same money to push for more development and higher adoption of linux or bsd?

    Or create 2 internets - one for windows users, and one for people with a clue.

  • Comment removed (Score:3, Insightful)

    by account_deleted ( 4530225 ) on Wednesday May 06, 2009 @10:36AM (#27845525)
    Comment removed based on user account deletion
  • by Geoffrey.landis ( 926948 ) on Wednesday May 06, 2009 @10:36AM (#27845527) Homepage

    I agree with the comment about positive externalities, which is a factor not always well understood by the libertarian-leaning computer community, but the problem is that I can't see a good argument that the government would do this well.

    Frankly, working for the government, I would say that the government's understanding of computer security is negligible. Their advertisements would consist of warnings telling you to use non-rememberable twelve- or more character passwords with upper lower number and symbols, and to change all your passwords every ten days to a different non-rememberable twelve- etc password, and then warn you to never go to any website that isn't on the official government approved list, because you might get phished.

    An alternate suggestion would be, go after the spammers and the malware distributors. Malware is getting distributed because people are making money off of it. Follow the money, and shut it down, and malware will go back to being a hobby of a small community of nerds.

  • by cayenne8 ( 626475 ) on Wednesday May 06, 2009 @10:39AM (#27845573) Homepage Journal
    Just one problem with all these suggestions.

    This is not something the Federal Govt. is mandated to do?!?!

    Where in the constitution would be the mandate for the feds to promote something like this? I know people try to squeeze everyting into the 'general welfare' statement, but, c'mon, this is a 'reach' even for something like that.

  • by mc1138 ( 718275 ) on Wednesday May 06, 2009 @10:40AM (#27845595) Homepage
    They'll just make a better idiot. I'm not saying anti-virus alone will do it, but I've found through practical experience that trying to educate users really only works with those are willing and able to learn. A vast majority of computer users are click happy and impatient willing to click anything and everything to get on with their day.
  • by Rogerborg ( 306625 ) on Wednesday May 06, 2009 @10:46AM (#27845679) Homepage
    Commerce Clause [wikipedia.org]. Thanks for making the argument that more education is needed.
  • by knarf ( 34928 ) on Wednesday May 06, 2009 @10:46AM (#27845687)

    OK, here's a comparison to chew on:

    You are getting overweight, feeling wheezy, have bad breath and sometimes feel like your heart is beating irregularly. Feeling uncomfortable with these facts and symptoms you consult a doctor. After a short conversation you tell the doctor that you eat out at McDonalds every day.

    Now the roads diverge:

    scenario A)

    The doctor tells you that you should take a diet pill every day, should use mint drops to cover your bad breath, should come back once per month to have your heart checked and get someone to assist you when you feel wheezy.

    scenario B)

    The doctor tells you that eating at McDonalds every day does tend to do these things to people. A burger every now and then does not do harm but if you only eat burgers you tend to develop these problems. He tells you about alternatives to McDonalds where more healthy food is served, advises you to cook a meal for yourself once per week, to get some exercise and to quit frequenting McDonalds.

    Which doctor would you rather have?

    And if your answer is 'A', then would you want the government to sponsor diet pills and mint drops as well?

    If there is a cure for the disease then why only treat the symptoms?

  • by montyzooooma ( 853414 ) on Wednesday May 06, 2009 @10:50AM (#27845749)

    Or create 2 internets - one for windows users, and one for people with a clue.

    That second internet isn't going to be very big.

  • by ausekilis ( 1513635 ) on Wednesday May 06, 2009 @10:54AM (#27845815)
    Except that Linux and Mac users aren't immune to viruses, they just aren't the big target. In fact, if you are working in a secure environment, *every machine* must have antivirus software installed, if it's available for the OS. To say that they would take a disproportionate amount of the (financial) burden is false. As those OS's gain more market share, or gain position in large targets (corporate servers), they too will become larger targets.

    Norton AV for Mac [symantec.com]
    They do have SAV for Linux, just hidden behind obscure web design... so here's a Helpdesk page [symantec.com] instead.
    McAfee offers Linux/Solaris as well as Windows too.
  • by Anonymous Coward on Wednesday May 06, 2009 @10:59AM (#27845895)

    You seem to forget that they interact with computers indirectly -- when they buy from a store with a card or use the bank to cash a check the information goes through computers. When they pay their electric bill or call your cell phone, computers.

    Unless they live off the land with an aquifer, no electricity and are ignored by the tax man because they've spurned Social Security your grandparents interact with computers even if they don't know they do.

  • by knarf ( 34928 ) on Wednesday May 06, 2009 @11:10AM (#27846063)

    OK, how about this then:

    Your neighbourhood is being plagued by gangsters. They demand 'protection money' from business owners, otherwise bad things will happen to their livelihood. Cars go up in smoke, windows break, inventory gets damaged, stuff gets stolen. There are two politicians who claim to have a good solution:

    Politician A proposes to set up a fund to pay off the gangsters. They will stop destroying stuff, society as a whole progresses, everyone is happy.

    Politician B proposes to hunt down the gangsters.

    It is clearly important to get those gangsters off the streets. Both solutions would achieve this goal. Which politician would you vote for?

  • by castironpigeon ( 1056188 ) on Wednesday May 06, 2009 @11:14AM (#27846157)
    There's not a single anti-virus software out there that's worth the trouble to pirate, let alone pay for. The virus database is always one step behind virus makers. The heuristic virus detection is awful and is much more likely to mark legitimate software as a virus than the virus itself. And if you do happen to get infected with a virus and it actually gets detected there's no way the anti-virus is going to clean it out completely.

    So far you could say the same things for anti-spyware software. But wait, there's more. Unique to antivirus software is the virus-like quality of the software itself. Have you ever tried to uninstall one of these things? Working at a university PC support center I used to see this a LOT. You're never going to get every last bit of the antivirus software off a computer. And then what happens when you want to install a new antivirus? Or when a user wants to be 'extra safe' and installs two antivirus programs simultaneously? /facepalm

    I say no thanks to that. Get a router with a firewall and sit behind it. Make sure everyone on your network is smart about suspicious links, scripts, email, IMs, etc. Common sense is free and works much better than anti-* software. When all else fails, reformat & reinstall.
  • Re:Can't Pay Me (Score:5, Insightful)

    by Bob Ince ( 79199 ) <and@@@doxdesk...com> on Wednesday May 06, 2009 @11:25AM (#27846343) Homepage

    The entire article is predicated on the idea that anti-virus software is effective at stopping malware.

    But today, that simply isn't true. With the proliferation of web exploits and constantly-updated payloads, the traditional signature-based methods of detecting malware are almost totally useless. OK, they still pick up the odd old-school mail worm or whatever, but no-one's going to get infected by those these days; it's all about the web exploits.

    (Even against the pen-drive infectors, which should be slower to mutate and easier to track, they're doing pathetically badly at the moment.)

    Heuristics-based detections can pick up a few more trojans, but at the expense of user-befuddling and potentially dangerous false positives. Behaviour blocking is the only approach likely to be effective, but today's implementations are shonky and unreliable. This sort of stuff - full per-program-permissions - really needs to be provided at an OS level, not as a wobbly vendor layer on top.

    Encouraging people to spend money on ineffective, performance-butchering anti-virus software is what we're doing too much of already, not something we need to be asking the Government to do more of. All it does is give users a false sense of security.

  • Re:Nope (Score:3, Insightful)

    by number11 ( 129686 ) on Wednesday May 06, 2009 @11:59AM (#27846791)

    Libertarians would not regulate pollution, they'd make the business that polluted pay for the damage they cause. With freedom comes responsibility. You can do what you like, but if it affects others, you have to pay for it.

    Then we'd have more superfund sites created by corporations that hid the pollution until they cashed out and dissolved, leaving the Libertarians holding the now-stinking empty bag. Maybe it would work if we abolished "corporations" and made the owners of the business personally responsible.

    Unfortunately, most Libertarians are all for personal responsibility, but don't see the disjoint with the concept of corporations (which are a legal device to prevent personal responsibility).

  • Lets smoke (Score:3, Insightful)

    by gmuslera ( 3436 ) on Wednesday May 06, 2009 @12:21PM (#27847141) Homepage Journal
    Instead of government taxing big tobacco, banning or disencourage its use, will promote and encourage its use, claiming that most have filters, and we have cheaper clinics that treats smoking related diseases,

    Someone lost the clue where the problem is, and what are the best steps to solve it. Is like asking government to just give aspirines to stop the swine flu.
  • by operagost ( 62405 ) on Wednesday May 06, 2009 @12:52PM (#27847629) Homepage Journal
    Under your immensely broad determination, just about anything could be considered commerce. After all, we're talking about subsidizing anti-virus software. That's not regulation: that's socialization. Regulation would suggest having the government set standards for anti-virus software to protect consumers from fraud-- and even then, those regs would only apply across state lines.
  • Re:Nope (Score:1, Insightful)

    by Anonymous Coward on Wednesday May 06, 2009 @12:53PM (#27847631)

    You must not talk with many libertarians. Most libertarians are absolutely against the idea of corporations.

  • by cayenne8 ( 626475 ) on Wednesday May 06, 2009 @01:56PM (#27848679) Homepage Journal
    "Commerce Clause [wikipedia.org]. Thanks for making the argument that more education is needed."

    Damn, isn't it about time SOMEONE challenged the broad scope that has been given to the commerce clause. It has allowed the Feds to go WAY outside of what they're supposed to be doing!!

    No, I wouldn't personally consider the commerce clause to be applicable to mandating anti-virus software for citizens. Then again, I'd not have thought that a farmer raising his own wheat for his own consumption, would somehow affect interstate commerce.

    :(

  • by cayenne8 ( 626475 ) on Wednesday May 06, 2009 @02:06PM (#27848849) Homepage Journal
    "The only way that we're going to be able to cut down on the spamming, scamming and other cyber crimes is through making sure people are educated and towing the line."

    Thing is, spamming and scamming pretty much only affects the stupid and gullible...it really doesn't affect me, I'm smart enough not to open and click everything, nor do I involve myself in stupid get rich schemes.

    Why should I even care if this is going on? If someone is an idiot...well, isn't that their right?

  • by SanityInAnarchy ( 655584 ) <ninja@slaphack.com> on Wednesday May 06, 2009 @03:40PM (#27850165) Journal

    And antivirus is not sufficient to protect "click-happy" users from themselves.

    Look, there have been tons of ads about drugs and smoking, and plenty of morons still do those in large quantities. But it's still justified to try, because that's really the only thing that will work. Outlawing them really doesn't do a thing.

    To abuse an analogy, suggesting antivirus is a bit like suggesting that everyone equip their mouths with a special "health detector", which beeps loudly and induces vomiting whenever it sees anything it thinks is a drug or a cigarette -- which also isn't able to detect meth, yet is able to detect pharmaceuticals, and must therefore be disabled frequently.

    Educating people not to smoke may not be effective, but it's a hell of a lot more effective than telling them to cripple themselves that way in an effort to protect them from not smoking, which is ridiculously easy for them to do on their own.

  • by DavidShor ( 928926 ) <supergeek717&gmail,com> on Wednesday May 06, 2009 @04:45PM (#27851013) Homepage
    Sorry, I don't see why what the founding fathers thought the fed's "should" be doing 300 years ago should outrank what the majority of citizens TODAY want the federal government to do.

    I understand the argument of constitutionalism for certain things, like freedom of speech or protection of minorities, on the argument that the majority might get temporarily inflamed and do something terrible.

    But persistent majorities for the last century have voted on a large and expansive government. It seems wrong to advocate their disenfranchisement.

  • Re:Hmmph. (Score:3, Insightful)

    by Ifni ( 545998 ) on Wednesday May 06, 2009 @06:30PM (#27852485) Homepage

    Everybody is responsible.

    1. No OS is secure, though some are inherently moreso than others, hence the OS makers are responsible
    2. Any idiot user can, by ignorance and bad practice, reduce the most secure OS to a virus ridden hell-box if given sufficient time, so the users are responsible
    3. The ISPs own the bandwidth and many of the resources used to spread viruses, and hence are responsible
    4. The criminals that research, design, build, and deploy the viruses are most directly responsible

    Additionally, anyone who, by inaction, allows the problem to grow is also arguably responsible. However, this is only part of the point. Good security is layered. You can't just fine the OS makers and call it a day as that won't solve the problem completely (inasmuch as it can be completely resolved) because like I said in point one, no OS is 100% secure, so eventually it will be exploited to spread a virus. Likewise, education isn't the only solution as even the best of us make mistakes, and even ignoring that any system is only so strong as its weakest link, so any given level of education merely raises the bar for the criminals. ISPs walk a fine line between monitoring the health of their networks and infringing on their user's privacy and/or freedoms, so there are limits to how far they should go. And punishing the perpetrators has been the preferred method since the dawn of mankind and you can see how well that's worked so far - it's effective, but it is imperfect on its own.

    So, since funding to thoroughly and directly address all of the above is unlikely to be available, which give us the biggest bang for our buck? Which should we do first? And considering that this problem is one among many, how much money should we throw at it? I don't have the answers or the research to determine the answers, but I would guess that a campaign to at least provide visibility to the issue would likely be one of the cheapest and most effective, and using it to point people towards low cost or even free tools that already exist and that can dramatically reduce the scale of the problem makes sense.

    But how extreme do we take this? Do we require a computing license, similar to a driver's license that all computer users must obtain before being allowed to sit behind the keyboard? Do we require all computer sellers or ISPs to include an information packet with this information, and maybe offer free or reduced cost classes to interested customers? Do we make those classes mandatory? Or do we just run some ads on TV during prime-time referring people to a web site? Again, this is open to significantly more debate, but the last item seems like a good start.

    As I wrap this up, it occurs to me that this is less a response to the parent post and more a (indirect) response to a sister post from causality (among other similar posts) and the article in general. As such, please be gentle with the offtopic and/or troll/flamebait mods. The point that I'm arguing is the finger pointing going on here is fruitless and largely a waste of effort since we all share blame to some degree, and as such any solution needs to acknowledge that in order to be comprehensive.

  • by cayenne8 ( 626475 ) on Wednesday May 06, 2009 @11:47PM (#27855395) Homepage Journal
    "But persistent majorities for the last century have voted on a large and expansive government. "

    Well, I'd say some politicians have been voting for it...gives them more power and more jobs, but, really, I don't think the majority of American citizens have been voting for it. The politicians just don't represent what the people want for the past decades IMHO. They're owned by the corporations and special interests, but, the will of the people I believe, has long been derided and ignored. Hell, most of the public knows it...and is now apathetic....hence the low voter turnouts time after time after time...

New York... when civilization falls apart, remember, we were way ahead of you. - David Letterman

Working...