According to experts, the
Microsoft Windows OneCare security bundle default setting is a bad idea. By default, the setting of this security software allows applications that has digital signature that is
connected to the Internet, like the Java Virtual Machine. Mark Curphey, vice president at vulnerability management specialist Foundstone, said that all firewall protection devices should have all its doors closed, denying all application. The hole in the system was discovered by Curphey when he ran a software on his wife’s computer installed with the
OneCare program. He added that this will just invite hackers and other internet goons to exploit the problem.
OneCare responded in their blog confirming that the program does allow the passage of signed applications and Java Virtual Machine without alerting the users. According to Microsoft, it is unlikely that a malware will be signed and if ever it does, its author could be traced. Disallowing Java would only result to the disablement of many important applications and asking permission to run the program would only confuse the user. Microsoft assured that if ever a malignant program does land on the computer, OneCare’s antivirus component should be able to catch it.
