Microsoft hasn't detailed what steps it is taking to dodge the attack. However, the software giant is advertising alternative ways to get downloads and information from its site. The company has put more than 10 links on its main Web site to send people to more information and alternative channels for downloading updates.
In addition, the company had changed the Internet addresses to which the domain Windowsupdate.com refers, which likely means that a different network will handle the brunt of the attack. A source familiar with the changes said that the new addresses are on a network isolated from other Microsoft computers, so if the network is bogged down by the attack, the company will suffer no other ill effects.
The company will take steps in the future to better lock down PCs as well, said Jeff Jones, senior director for Microsoft's Trustworthy Computing initiative.
"For add-on security software, we are going to look at erring on the side of security rather than features and settings," Jones said.
The Internet Connection Firewall, a basic piece of software security that comes with Windows XP, will likely be turned on by default in the future, Jones said. He couldn't say when that will happen, however. The switch could occur in the next big update, called service packs, or be held off until a new version of the Windows operating system is released.
Moreover, software makers need to make their applications work better with the security of home computers, rather than bypassing the protections, said Fred Felman, vice president of marketing for computer-security software maker ZoneLabs.
"Application vendors do need to be more responsible about what services they do need to open up," Felman said.
Many times, consumers who have turned on firewalls will turn them off whenever an application doesn't seem to work properly. Often, they forget to turn the firewall back on.
