Woody Leonhard’s no-bull news, tips and help for Windows and Office
RSS icon Email icon Home icon
  • The PIFTS Norton conspiracy

    Posted on March 10th, 2009 at 22:44 woody 3 comments

    SANS Internet Storm Center reports that Norton has been caught with its pants down, again.

    It seems that an update yesterday to one (several?) of the Norton products includes a file called PIFTS.exe that phones home, to stats.norton.com. ISC says that many people have reported the problem – PIFTS’s aberrant behavior was detected by Norton’s Firewall.

    That’s just stupid. Here’s what makes it a conspiracy. Hundreds – perhaps thousands – of messages posted on Norton’s support forums regarding PIFTS have been deleted.

    More info shortly.

     

    3 responses to “The PIFTS Norton conspiracy”

    1. Good grief.flaming firewall
      The burnt smell coming off Norton today reminds me of the ZoneAlarm 6.0 phone-home fiasco two years ago:

      “ZoneAlarm Security Suite has been phoning home, even when told not to. Last fall, InfoWorld Senior Contributing Editor James Borck discovered ZA 6.0 was surreptitiously sending encrypted data back to four different servers, despite disabling all of the suite’s communications options. Zone Labs denied the flaw for nearly two months, then eventually chalked it up to a “bug” in the software — even though instructions to contact the servers were set out in the program’s XML code.”

      Read all about it:
      http://www.infoworld.com/article/06/01/13/73792_03OPcringley_1.html

      Who will watch the watchmen?

      You’d have to be nuts to trust ZoneAlarm or Norton: They create a phone-home, fail to catch it in pre-release trials of the firewall (did they even try?), and actively do a cover-up. That’s not security *for you*. That’s security *for them, at your expense*.

    2. Even if this issue had not surfaced, Neil Rubenking of PC Magazine is investigating reports that Symantec/Norton techs in India are ripping off Live Chat customers and using unauthorized non-Symantec software in Remote Assist sessions. Pretty scary stuff!

      http://www.pcmag.com/article2/0,2817,2342634,00.asp

      Title: “Symantec Support Goes Rogue”

      And that’s from one of the biggest cheerleaders for Norton products on the Internet.

    3. The Conspiracy Theory about those posts to the Symantec Forums is pure FUD. See the PC Magazine News Story which clears up the entire PIFTS episode. It was an innocent programmer oversight regarding not digitally signing or assigning permissions to a normal Norton update.

      http://www.pcmag.com/article2/0,2817,2342809,00.asp

      Norton products have always phoned home constantly (it’s called Live Update), which is one reason why I removed them from my laptop a couple of years ago.

    Leave a reply