CodeBetter.Com
CodeBetter.Com
RSS 2.0 via Feedburner
           Do you Twitter? Follow us @CodeBetter

Eric Wise

Business & .NET

Have people lost their minds?

There must be some kind of lunar activity drawing all the freaks out.  I have read some ridiculous FUD today.   Let's recap shall we?

From slashdot

Apparently if you don't have your firewall turned on you're vulnerable to an attack.  Alright, granted the exploit is an old method that hasn't been fixed, shame on you Microsoft, but come on people, is it really "news" that if you don't have your firewall up on your server that you're vulnerable?  Not having a firewall on is the equivalent of keeping your house keys under your doormat.

Richard Who?

So here's a guy who no longer wants his job of posting .NET development news and walks out the door firing off some... interesting... criticisms of the .NET Framework.  Let's review:

"I was initially overwhelmed by the size of the framework"

Really?  That's interesting.  There are a ton of classes in the .NET Framework and even after working with it for 3+ years I still haven't learned every nook and cranny.  Yet if you master the few most common classes (like System.Data for example) you're well on your way to 95% of the code you'll write in an application.  How is having a lot of framework classes considered a bad thing?  Is this better in the java world where there are a cubic ton of libraries and add-ins that you have to pour over to find what you're looking for?

Next, Richard attacks VB .NET, especially the incombatability between VB 6.0 and VB .NET.  This is really a no-win situation for Microsoft.  Back in the day VB was known as a kid's language because it didn't support multiple threads, true inheritance, etc etc etc.  So Microsoft goes and upgrades VB .NET, keeping the majority of the syntax that VBers know and love while making it a true OO language just as powerful as C#.  So naturally now people are bitching that VB .NET has too much of a learning curve, you may as well learn a new language.  In my very humble opinion, old school VB was a great RAD tool that allowed a lot of mediocre coders to write some very bad code.  Very bad code that can't be exposed to .NET through COM interop is going to need to be rewritten.  If you're pissed about that maybe you should have hired better developers, not taken shortcuts, and written such crappy code to start with!

Sahil Malik

Sahil brings us another article from CNET who seems to be struggling getting ratings from good content and has decided instead to scare uninformed windows users.  Don't install sp2?  There's been a lot of FUD going around about sp2 breaking machines and interferring with existing applications.  Between work, home, and being the tech support guy for friends, neighbors, and family I have applied SP2 to well over 50 machines and never had one failure.  Not one.

You don't want sp2?  Fine, just walk over to your pc and unplug it from the internet.  Problem solved, you're secure.  Instead of spreading all this fud they should be drilling 4 things into people's heads:

  1. Don't run attachments unless it is an attachment you are were notified someone is sending and they're from someone you know.
  2. Invest in a router with a firewall to put between your machine and the internet
  3. Keep your software up to date.
  4. Run antivirus, firewall, and spyware cleanup (only thing that costs money is antivirus)

Follow those 4 steps and your chances of getting infected are minimal.


Published Mar 07 2005, 12:32 PM by Eric Wise
Filed under:

Comments

Michael Ames said:

"...only thing that costs money is antivirus..."

Even that's free. I've had good luck with SP2 and Avast: http://www.avast.com/

-Michael
# March 7, 2005 1:13 PM

Sahil Malik said:

Ahh dude, I said that, that CNET article is bunk. I clearly said "Screw CNET and install SP2".
# March 7, 2005 1:20 PM

Geoff Appleby said:

I came here to leave a comment about antivirus (I've had a lot of success with AVG antivirus) and I see your running my skin!

w00t!

If you have any changes you want made to it, let me know. I've also been meaning to write a few different color versions...
# March 7, 2005 4:01 PM

Jay Kimble said:

Gotta post my 2 cents (since in the coming months I think I'm going to be beating this drum)...

You missed something else that we can't totally suggest... yet!

Optional #5-
Research running as a non-admin and do it! You'll signifcantly reduce your attack surface

(I know developers are scared of running as a user...)
# March 7, 2005 9:33 PM

Darrell said:

But see the 4 things CNET should be saying doesn't make users feel better because it actually tells them its THEIR FAULT! In today's world we have to blame our parents, government, Microsoft, ANYONE but us. So if CNET actually tried to educate users, their users would think "but I can just go to this other site and they will tell me it's not my fault." Click, user gone. CNET loses, we lose, Microsoft loses, all so some uneducated users don't have to take responsibility for THEIR OWN EMAIL. Ain't life great?
# March 8, 2005 6:06 AM

Leave a Comment

(required)  
(optional)
(required)  

Enter the numbers above:
Add
Check out Devlicio.us!