Peter Norton Sold The Biz... And Symantec Has Given US The Business Run-Around

Researchers: Anti-Virus Software Has Flaw

Peter Norton was a minor god in the field of hard drive technology and protecting computers from invasion from outside. A leader in the development of anti-virus protection, Norton sold his anti-virus concerns to Symantec... and now we learn that Symantec has not done due diligence to assure that the anti-virus software remains secure and effective... and our government computers are full up with Symantec's work.

Alas, McAfee and the makers of other anti-virus software are dancing in the streets now!

Symantec's leading anti-virus software, which protects some of the world's largest corporations and U.S. government agencies, suffers from a flaw that lets hackers seize control of computers to steal sensitive data, delete files or implant malicious programs, researchers said Thursday.
Symantec said it was investigating the issue but could not immediately corroborate the vulnerability. If confirmed, the threat to computer users would be severe because the security software is so widely used, and because no action is required by victims using the latest versions of Norton Anti-virus to suffer a crippling attack over the Internet.

Symantec has boasted its anti-virus products are installed on more than 200 million computers. A spokesman, Mike Bradshaw, said the company was examining the reported flaw but described it as "so new that we don't have any details."

Researchers from eEye Digital Security of Aliso Viejo, Calif., discovered the vulnerability and provided evidence to Symantec engineers this week, said eEye's chief hacking officer, Marc Maiffret. He demonstrated the attack for The Associated Press.

Maiffret's company — which has discovered hundreds of similar flaws in other software products — also produces intrusion-protection software, called "Blink," that he said already blocks such attacks and can operate alongside Symantec's anti-virus products.

Maiffret published a note about the company's discovery on its website but pledged not to reveal details publicly that would help hackers attack Internet users until after Symantec repairs its anti-virus software. eEye said it intends to describe the problem in detail privately for some of its largest customers.

"People shouldn't panic," Maiffret said. "There shouldn't be any exploits until a patch is produced."

The reported flaw comes at an awkward time for Symantec. Its chief executive, John Thompson, has campaigned in recent months to convince consumers they should trust Symantec — not Microsoft — to protect their personal information.

Maiffret said eEye's testing showed the problem affects Norton Anti-virus Version 10, including its corporate editions. He said Symantec's current security suite — which includes both anti-virus and firewall features — did not appear to be vulnerable.