A few thoughts,
The Karma Sutra issue, really there is nothing new about malware like this one. Every day I watch and monitor much worse threats. I feel this one was escalated by the back seat approach Microsoft has taken.
On the M$ site it states that, 3rd party security vendors already have in place solutions to suppress the Karma Sutra threat. Also that they [ M$ ] will not break their patch cycle to address this problem, but.......if you have purchased additional support packages, you can get the patch in advance. They acknowledge the problem, that they have in place the patch already....but the average end-user must wait for the next patch day. Or fork out more cash M$'s way [ Still scratching my head on that one ].
I have one question for M$
" When are you going to allow 3rd party vendors [ security ] to release their own version(s) of the M$ OS [ Windows ] ???? "
I would have zero problems handing over cash to any 3rd party that could offer a secure version of XP. Especially, when it seems that M$ doesn't feel that the every day users of their products are important. It is rather puzzling....3rd party vendors address and watch out for M$'s customers when they don't. Yes, Anti-Virus companies make money by providing computer security and solutions. That's not the real issue at hand, the real issue is the lack of responsibility M$ seems to take for their own products.
An ex-programmer for a rather ' large ' OS provider once told me. " Microsoft and their products are one of only a few services offered that people will accept fault and flaws in, and always return to.....and to boot, they continue to shell out big bucks, not only in the price of the OS, but also in 3rd party technical services that clean and repair their systems of viruses".
I'm not in any way anti Microsoft, I do however feel that they need to ' FIX ' their products, provide more information to the general public about the harm Windows for example can cause [ think big tobacco and the Surgeon General Warning ]. Provide equal product care to all, and again FIX your product(s).
With Karma Sutra the public was made aware of an issue that could have been worse. That is if 3rd party vendors had not provided security solutions for Microsoft and their customers.
I do not feel M$ will ever FIX their product(s), nor will they take responsibility for their flaws, so maybe we need to look else where for a middle ground. One where M$ can continue to produce and sell ' snake oil ' and the customer has enough heads up to purchase/seek if needed extra 3rd party product protection.
How ? , one way is the main stream news media, here in the USA we have Amber alerts, emergency weather, etc. notices on both tv and radio. I suppose they could include Windows security alerts also ? and I would encourage malware writers to include document trashing in all of their code. It seems to wake people up when they hear that their documents and pictures are at risk !!!