|
Aplus Omega Editorial
News about Security, Privacy, Microsoft and its Antitrust Case from 2000 -
Present
03 Apr 00 - Microsoft's first trial ENDS. Its antitrust
violations of the Sherman Antitrust Act being clearly outlined in the
discovery phase of this first trial with U.S. District Judge Thomas
Penfield Jackson. It was found that Microsoft monopoly powers included:
(1) Market Share - Microsoft controls 95% of the operating system
(OS) market. People buy OS's to run applications. The OS sits between
the applications and hardware. If an application wants to run it must
ask the OS which controls the hardware on the computer. Application
developers who want to make a profit must write their programs to run on
Windows which is the dominant OS. Thus Microsoft's market share will
never decrease since all the applications people want will be written
for Windows.
(2) Pricing - Microsoft could set any price it wants for its OS
without losing customers since there is no competition. There are over
70, 000 applications that can run on Windows while the next closest OS
can run only 3,000. Hence it has OS monopoly powers.
(3) Application Development - Microsoft can prevent any application
from being fully developed and has Application (IE, Office, MS Media
Player, ...) monopoly powers since it can refuse to give any company
that threatens one of its applications the critical API information.
Without this information a competing application (Netscape, RealNetworks
Media Players, Apple's QuickTime, Sun's Java, ...) cannot be fully
developed and the competing company cannot even make sure it will run
properly.
(4) OEMs - Different OEMs, depending on the degree to which the
individual OEMs comply with Microsoft's wishes, pay different prices for
Windows . Gateway and IBM, which in various ways have resisted
Microsoft's monopoly efforts, pay higher prices for Windows than Compaq,
Dell, and Hewlett-Packard.
(5) OEMs - Besides raising the prices, Microsoft has simply refused
to license its operating system to those computer manufacturers who take
out the IE browser or change the opening desktop shortcuts.
(6) In summary it is best expressed by Thomas Penfield Jackson, the
U.S. District Judge presiding over the first antitrust trial:
"Most harmful of all is the message that Microsoft's actions have
conveyed to every enterprise with the potential to innovate in the
computer industry. Through its conduct toward Netscape, IBM, Compaq,
Intel, and others, Microsoft has demonstrated that it will use its
prodigious market power and immense profits to harm any firm that
insists on pursuing initiatives that could intensify competition against
one of Microsoft's core products. Microsoft's past success in hurting
such companies and stifling innovation deters investment in technologies
and businesses that exhibit the potential to threaten Microsoft. The
ultimate result is that some innovations that would truly benefit
consumers never occur for the sole reason that they do not coincide with
Microsoft's self-interest."
Final Judgement:
(1) The separation of the Operating Systems Business from the
Applications Business. After Implementation the Operating Systems
Business and the Applications Business shall be prohibited from
providing to the other any APIs that you don't give to other competing
application developers. Thus promoting innovation and competition by
allowing other application developers a chance to develop their
products.
(2) Microsoft shall not take or threaten any action adversely
affecting any OEM for not compling with its wishes. This includes but is
not limited to higher OS prices for some computer manufacturers if they
don't continue to promote Microsoft's monopoly interests.
(3) This judgement was reversed after a two year Appeal on 01 Nov 02.
Final Assessment:
Great original plan. It covered the two main monopoly issues
(application development and OEM threats) and would have gone a long way
to promote more innovation and better prices for consumers without
"destroying" Microsoft. The company would just be separated to curtail
and regulate its massive monopoly power.
Hats off to Judge Jackson. The evidence clearly proved Microsoft's
antitrust violations and your judgement was sound. But when your up
against a titan with that much money and influence - the people will
always lose on appeal. Mergers and monopolies
have grown steadily since the 1950s. And people wonder why gas prices are
over $2 gallon, OS's cost $200, people can't afford health care, and now
the two income family is the rule and not the exception ... Since Exxon
and Mobil merged there is no competition in the oil industry. Sears
absorbed Kmart, the pharmaceuticals have been merging, and on and on ...
Soon there will be only two or three oil, department store,
insurance, PC manufacturering, ... and grocery companies. The founding
fathers knew the dangers of monopolies and set up laws to stop them but
today these companies have grown too large and have too much money and
influence to be stopped.
17 Jan 02 - Microsoft Chairman Bill Gates has made security one
of the company's top priorities, telling employees "that failing to make
products less vulnerable to viruses, instability and privacy breaches will
jeopardize the firm's future. When we face a choice between adding
features and resolving security issues, we need to choose security" Gates
said in an e-mail to his 50,000 employees. That is probably the
best response we could ask for but is this a serious commitment or is this
good PR (public relations)?
30 Jan 02 - Microsoft releases the first Security Rollup Package (SRP) which is a package
of all the updates for Microsoft Win 2000 which we assume addresses many
of the 69 vulnerabilities we have mentioned above.
02 Feb 02 - Want to make sure your Computer Security Department
is a complete failure. Hire someone with NO background in the area to lead
it. Then sit back and wait for others outside of Microsoft to find holes
so you can hand these out as projects to your employees to patch.
Former Dept of Justice lawyer Scott Charney takes over as Top Dog for Security at Microsoft to manage the
activities and provide direction to software engineers and security
analysts. He should definately help (or already has helped) with
Microsoft's pending antitrust settlement with the Dept of Justice which 34
states now oppose. The states concluding this settlement would allow
Microsoft to continue with little or no effect on its business practices.
As for Charney's present job of securing Microsoft's operating systems,
this might be difficult for someone with a law background. Besides as long
as sales are up and business is booming, do you really think they are
going to change anything?
03 Feb 02 - Microsoft has halted all new software development
for one month so that the company's programmers can focus instead on
fixing existing bugs. Good PR!
01 Mar 02 - Microsoft delays its .NET
server operating system release. If we can't meet our deadlines
just say we're working on security.
15 Mar 02 - Now that we hired your former Dept of Justice
lawyer Scott Charney, Microsoft wants the Dept of Justice (DOJ) to
be the sole decision maker in its antitrust case. Apparently noting that
something doesn't smell right twenty-five more states join the original group
of nine to oppose the DOJ settlement.
04 Apr 02 - AOL Vice President John Borthwick along with
Netscape, Novell, Gateway, Apple, Sun, and Red Hat supports alternative
remedies offered by the group of nine states in the antitrust settlement
against Microsoft stating "the proposed settlement would still allow the
software giant to protect its Windows operating system monopoly"
01 Nov 02 - The Appeals battle with the federal government over
its antitrust violations ENDS as U.S. District Judge Colleen
Kollar-Kotelly dismisses most of the concerns of the nine states.
Microsoft will not be divided into an Operating System Division and
Applications Development Division.
After reading the courts records, the entire case comes down to two
main points.
(1) Giving ALL application developers an even playing field by
publishing the API's they need to interface with Windows.
(2) Giving ALL computer manufacturers the same prices for Windows. Not
raising the fees or not licensing your OS to those who don't help support
your monopoly.
After millions and milions of dollars in attorney fees and almost four
years in court the two main problems listed above are still not fixed.
Giving Microsoft in the final judgement nothing more than a slap on the
wrist with its blessing to continue "business as usual". Judge Jackson had
a solution but your Appeals Judgement Stinks.
Too much money equals too much power equals total corruption of the
system.
CompTIA (now basically run by Microsoft, Thomson, and a few other large
corporations) hailed the judge's ruling as a victory for the technology
sector and consumers. Note that CompTIA's business has increased
significantly since Microsoft agreed to allow CompTIA's A+, Network+, and
Security+ exams to fullfill the elective requirements for the MCSE and
MCSA certifications.
While CNET comments "The proposed deal would impose relatively mild
restrictions on the software maker compared with earlier rulings in the
4-year-old case, focusing largely on tweaking Microsoft's competitive
behavior. But nine of the 18 states that joined with the DoJ to prosecute
the historic antitrust case refused to sign the settlement. Those states
including California, Connecticut, Florida, Iowa, Kansas, Massachusetts,
Minnesota, Utah and West Virginia who argued the agreement was bad for
Microsoft competitors and consumers because provisions intended to rein in
Microsoft's monopolistic business practices were riddled with exceptions
that gave the company too much latitude.
Donald
Falk, a partner with the law firm Mayer, Brown, Rowe & Maw, in
Palo Alto, California, who specialises in antitrust law - "What the
opinion said basically was, You robbed a bank, you can keep the money, and
you can do it again, but don't use exactly the same method."
29 Nov 02 - From The Office of Massachusetts Attorney General
Tom Reilly - "Without clear restraints, Microsoft will continue to engage
in predatory practices and eliminate any real chance for consumer choice
or business innovation".
29 Nov 02 - Microsoft does it again! Similar to its Feb
02, 2002 decision to hire attorney Scott Charney, who worked for the U.S.
Justice Dept when the U.S. Justice Depts monopoly investigation was
conducted, Microsoft has hired Detlef Eckert who had worked for the
European Commission when the Europe Commission's monopoly investigation
was being conducted. Eckert will also work on "security"?
Have a big purse and want to win a trial. Hire the other sides
attorneys and investigators! Trouble with a competitor. Buy the company.
Microsoft invested $150
million in Apple in 1997, $750 million in AOL (Netscape) and won't
have any more trouble from these two companies. Only a few more to go.
Microsoft's not the only one that does this. Juan Carlos Ramirez one of
the most powerful members of Columbia's North Valley drug cartel has hired
attorney Mrs. Stapleton Milford who was the former head of the U.S.
Organized Crime Task Force against drugs. By the way she is married to the
Deputy Administrator of the DEA. Great.
3 Jan 03 - Microsoft and Bush Administration officials have
asked a federal judge to bar two computer industry trade groups from
appealing the settlement of the 4-year-old antitrust battle. Federal
antitrust enforcers and Microsoft said the Software & Information
Industry Association and the Computer & Communication Industry
Association DON'T have a right to appeal.
4 Jan 03 - Seven of the nine states have decided NOT to pursue
the Appeals process. Lawyers representing Massachusetts and West Virginia,
the last two holdouts in the Microsoft antitrust case, continue to fight
on and asked the U.S. Court of Appeals for the District of Columbia today
to hear oral arguments against the Nov 2002 settlement that U.S. District
Judge Colleen Kollar-Kotelly approved.
In response, Microsoft said it will pay $25 million in legal
reimbursements to be divided among those seven states who decided not to
pursue the Appeals process. West Virginia and Massachusetts get nothing.
10 Feb 03 - Microsoft agrees to pay $1.1 billion to settle
class-action lawsuits brought by Californians.
03 Mar 03 - Scott Charney, Microsoft's chief security
strategist, has commented that Windows operating systems will now be
shipped with maximum security features turned on by default.
Locking down products when they're released. Excellent idea but from the
looks of your XP SP2 released in Jun 04 with 80% of the threats to your OS
still enabled by default this is just good PR. For whatever reason,
Microsoft simply does NOT want to secure its OS's. Two of the most
compeling reasons why are:
"Make more Money"
and
"Maintain our Monopoly"
Done by "Buy our new OS the most secure ever. If the OS you are using
doesn't stink then you won't buy a new one." and "maintaining our spy
software for the feds so they will let us keep our monopoly. The Microsoft
monopoly was broken up by Judge Jackson but this decision reversed on
appeal by the feds. Now aren't you glad you kept those backdoors and
secret encryption keys in your software for us. If you ever secure your OS
we'll bring another suit against you and this time we will break up your
company".
It is simply not reasonable to conclude Microsoft does not know how to
lockdown its OS's. If its 50,000 employees can't do it they can go to the
bookstore and buy any number of books on security that tell them how. Or
read the numerous articles on the internet. Microsoft will not make their
OS secure and these are the two best reasons why!
28 Mar 03 - The Computer & Communications Industry
Association and the Software & Information Industry Association will
finally get their day in court after being denied their appeal of the
Microsoft antitrust ruling on 03 Jan 03 by District Court Judge Colleen
Kotelly. A U.S. federal appeals court will hear arguments from the two
trade groups "en banc," meaning that ALL of the Court of Appeals judges
will hear the matter rather than just one or a smaller panel of them as
described in this Computerworld
article.
31 Mar 03 - "Most IT experts still do not trust Microsoft" was
discussed in this article
by Infoworld.
16 Apr 03 - Microsoft Corp has agreed to pay up to $202 million
to settle class-action suits in Florida in a deal similar to that worked
out in California where people who have purchased Microsoft products would
be given coupons to buy computer hardware and software. Half of any
settlement money that goes unclaimed will go to needy public schools in
Florida .
11 May 03 - Remembering past blows especially when IBM signed a major
Linux deal with the German government who agreeded to remove Windows
and install Linux on 14,000 of its computers, Orlando Ayala the # 3 top
dog at Microsoft who is in charge of Sales and Marketing said to his
employees "Under
NO circumstance lose against Linux" again.
This opinion is echoed by many executives at Microsoft including its
CEO Steve Ballmer who the Chicago Sun Times reports as saying "Linux is a
cancer that attaches itself in an intellectual property sense to
everything it touches". And as everyone knows cancers spread and must be
destroyed.
Microsoft is considering deep discounts or even giving its software
away for free to win big government and institutional contracts when
competing with Linux. Antitrust sanctions? Competition? It's business as
usual.
Ralph Nadar comments "there is ample evidence that Microsoft is focused
on strategies to cripple the free
software movement, which it publicly considers an important
competitive threat."
It seems Microsoft has thrown down the gauntlet and is now taking
square aim at Linux.
12 May 03 - SCO (a UNIX software developer) threatens Linux
with legal action for allegedly stealing its UNIX source code. This comes
after SCO filed a suit for $1 Billion against IBM. IBM (the last real
threat to Microsoft) should follow Microsoft's policies and buy SCO.
Top Five Reasons Microsoft invested in Apple:
5. Bill Gates found some spare change in his
trousers
4. This was the fee for Steve Jobs to teach diplomacy
to Bill Gates. He sure needed it at the congressional hearing.
3. Yes, we did copy your operating system, so we'll
give you some money
2. Easier than hiring or bribing the entire Justice
Department. Although we never bribe anyone. We just give them a $500,000
salary, an office and say, you really don't have to do anything or come
it to work. You've already done your job. We didn't get any real
sanctions. Life is good. Just not for the consumer.
1. Small price to pay for world
domination
19 May 03 - Microsoft pays SCO for a "licensing deal". The
details of the payoff were not disclosed. And if Big Blue tries to buy you
out we're bidding against them. Time to buy some SCO stock.
20 May 03 - As Symantec continues to develop new antivirus
programs for Linux, Microsoft teams up with Network Associates McAffee and
Trend Micro which are Symantec's two major competitors to form the Virus
Information Alliance. Symantec is aligning itself with IBM and Linux. The
battle lines are being drawn for a clash of the TWO TITANS. It will be IBM
vs Microsoft.
30 May 03 - Microsoft has converted another long time rival.
Similar to how it influenced Apple, Microsoft will pay AOL Time Warner
$750 million in a deal which will bring AOL (and its subsidiary, Netscape
Communications) into its camp. The deal also includes a provision for AOL
to begin using the Microsoft IE browser instead of Netscape. This in
effect puts the nails in the coffin for the Netscape browser and
eliminates another major source of competition.
This was one of the major contentions in Microsoft's antitrust suit
that it was forcing people to use its Internet Explorer browser and they
could not choose Netscape.
12 Jun 03 - Microsoft
to kill popular Linux antivirus product by buying the company that
makes it and discontinuing the product
17 Jun 03 - West
Virginia settles for $21 million and drops its antitrust suit against
Microsoft leaving Massachusetts as the only state still fighting the
ruling. Beats the $3 million they would have received if they sold out
early with the seven (7) other states. For Microsoft $21 million is 2
pennies out of the dollar it makes each year (figures based on Microsoft's
$10 Billion/ yr income on sales of 32.7 Billion/ yr)
26 Jun 03 - IBM continues to win Linux deals in governmental
agencies across Europe, announcing six new deals in Belgium, France,
Finland, Spain, and Germany.
3 Jul 03 - IBM plans to discontinue its line of Windows based
network attached storage (NAS) devices in order to focus on higher-end
products, including an upcoming file server that will run Linux.
7 Jul 03 - The State of
Massachusetts is investigating whether Microsoft has violated its
anti-trust settlement by retaliating against a computer maker for
promoting Linux.
14 Jul 03 - Walmart
offers a New Linux PC with preloaded open source software including
OpenOffice which is compatible with Microsoft's Office. Prices for these
computers start at $298. Time to start selling Microsoft stock again.
14 Jul 03 - Sybase
on Monday unveiled plans to port all of its software to Linux by next year
and launched a Linux Competency Center in New York for customers to learn
more about its products.
16 Jul 03 - Then there
was ONE, Microsoft's Internet Explorer. AOL's decision to lay off
about 50 Netscape software developers effectively ends this browser
technology. Most saw the writing on the wall with the AOL/ Microsoft $750
million deal on 30 May 03.
30 Jul 03 - An IBM executive has
claimed that a "set of forces" is at work attempting to derail Linux, and
hinted that Microsoft and SCO are among those responsible.
05 Aug 03 - Linux
software has been approved for use on the most sensitive computers in
corporations and the federal government, including those inside banks and
the Pentagon.
4 Sep 03 - Microsoft
reports five new security flaws in its software including one of critical
severity. Nimda, Code Red, Slammer, Blaster, Sobig, ... and the beat goes
on.
The stage is set. In this corner the multi-billion dollar Microsoft
Corp with 50,000 employees and thousands of computer science PhD's vs. the
lone teenager in his parent's house. I guess we all know who is winning.
The question is WHY are they throwing the fight. Could it be that they
want to convince us to buy another OS "the most secure ever!". This plan
worked perfectly for XP which broke all other OS's sales records.
18 - Blaster worm - Jeffrey Lee Parson, a high school senior from a
Minneapolis suburb
10 Sep 03 - IBM
helps the UK's Office of Government Commerce and Russian Ministry of
Communications and Computerization deploy Linux
15 Sep 03 - Japan, South Korea, and China are planning to
co-develop a Linux based open-source operating system to replace Microsoft
Windows. Asian governments are particularly attracted to the idea that the
Linux source code is open for reading and editing. This assures government
leaders that their servers don't have sinister back doors leading straight
to Washington DC.
24 Sep 03 - Hewlett-Packard
to SCO (and Microsoft) - "Go Ahead Make My Day" - If you go after our
Linux customers we will fight you in the courts. We, not they, will supply
the attorneys. We will provide full indemnity across the entire suite for
any SCO-related action," said Martin Fink, HP's vice president of Linux.
"If customers were to get sued by SCO, we would take over their defense
and assume liability on their behalf."
26 Sep 03 - Massachusetts,
the lone holdout state still suing Microsoft for antitrust violations,
wants to become the first state to adopt a broad-based strategy of moving
its computer systems toward Linux.
27 Sep 03 - under 18 - second arrest in connection with the
Blaster worm is a juvenile accused of creating a variant of the worm. Name
and age not released yet since he's under 18
Who's to blame? Of course the teenagers writing these worms and viruses
but also Microsoft. We consider it this way. If you payed your bank to
store your valuables in their safe and they were stolen every week by
teenagers you might ask the bank.
Why are kids able to break into your bank? These are not world class
thieves.
Do you have an alarm system? No. Are there security guards? No. Do you
lock the safe at night? No. Why not?
Too costly. Besides why spend the money. We're the only bank in town
and you have come here whether you like our service or not.
It all comes back to competition. Without it there is no
innovation or product improvements and the consumer always gets gouged.
We see it in operating systems and the oil industry. Once Exxon and
Mobil were allowed to merge there really is no competition here also. Why
are gas prices so high? Why don't we have cars running on water
(hydrogen)? Advances in solar or wind generated power? Competition. When
your that big you can crush or buy out the competition (including the
patents for these new discoveries which are never released)
Cars running on water - water H2O through electrolysis converts to H2
(hydrogen) and O2 (oxygen). The hydrogen can be burned like gasoline to
power the car. The best thing is there are no cancerous pollutants.
Hydrogen is the purest burning fuel. When hydrogen burns it forms water
again. The water coming out the car's exhaust can then be funneled back
into the fuel tank and you'll never have to refuel the car. Don't expect
this anytime soon. Patents for this are stored in oil company vaults only
to be released when the oil reserves are gone. But oil companies are not
the only ones.
Even the dentists do this. There is one microorganism that causes tooth
decay ie. the bacterium Streptococcus mutans, which produces lactic acid
as it feeds on sugar and other carbohydrates coating the teeth. Acids
which eat holes (cavities) in your teeth. That's when the dentist gets out
his drill. Twenty years ago my college Professor, who was working on a
vaccine against this bacteria, came into class and told us he was bought
out by the dentists and was payed to stop his research. An offer too good
to refuse. Also saying this is not a hard organism to make a vaccine for.
Probably hoping one day some of us might continue his research. I don't
know if anyone ever did although this vaccine comes back in the news every
few years only to be silented. I went on to study computer science.
Can you imagine one shot and you will never have tooth decay. No more
dentists, toothpaste or mouthwash manufacturers ... Very possible but not
probable. Too much money against it. Just like you will never see cars
running on water, major advances in solar or wind power, or a secure
operating system.
The only reason Linux is still among us is Linus Torvalds who created
it in 1991 would not be bought out, other governments don't like
Microsoft's "spy" software, and now IBM supports it. Competition. A
company too big for Microsoft to crush, buy out, or intimidate. And if you
don't think Microsoft wants to crush Linux here is what some of Microsoft
top CEO's are on record as saying: "Linux is a cancer which must be
destroyed." and "Don't lose another contract to Linux at any cost."
Bill Gates, similar to Linus, would also not be bought out. The only
difference is Gates retained the rights to his operating system while
Linus Torvalds gave Linux away free in 1991 when he was a student in
Finland.
In 1980, when IBM approached Bill Gates and Microsoft to write an
operating system for its new PC he wrote MS-DOS. Gates then talked IBM
into letting Microsoft retain the rights, to market MS-DOS separate from
the IBM PC project. The most important decision of his life. Not to
be bought out. A decision, influenced by his parents which were attorneys,
that made him a multi-billionaire and the richest man in the world instead
of having a few thousand dollars in his pocket.
30 Sep 03 - Scott Charney, chief security strategist at
Microsoft, tells us "It will be up to businesses and end-users to
upgrade to a more secure platform" for better security. We've already
heard that with each new operating system release. Remember XP the most
secure operating system ever (and its security stinks) now its buy Windows
2003 the most secure OS ever.
2 Oct 03 - Microsoft faces a class action lawsuit in California
based on the claim that its market-dominant software is vulnerable to
viruses capable of triggering "massive, cascading failures".
10 Oct 03 - IBM receives a contract from Brazil
to become the latest country to adopt Linux. Following moves by the
Russian, German, UK, Finland, Spain, Belgium, French, and Chinese
governments.
15 Oct 03 - Wednesday, Microsoft issued its first scheduled monthly
security update. The October release contains patches for five new
vulnerabilities in Windows. Four of which are considered critical.
One of the new critical flaws lies in Authenticode and affects Windows NT
4.0, 2000, XP and Windows Server 2003 which are all built on the same base
code.
The problem arises because an ActiveX control could download and
install on users' machines without giving users the chance to approve the
download. An attacker could exploit this vulnerability by constructing a
URL that, when clicked on by the user, could execute the malicious code.
Better not offer a patch for Dec though. We don't want our
customers thinking our OS is no good right before we want them to buy it
and put it in the stocking. OK Boss. No patch for Dec.
It's futile. You have been patching for over 10 years since win 3.1
This year alone you issued 47 security patches. Many people believe you
don't know anything about security. We don't. The more this goes on the
more we believe you have another motive for not locking down your
OS. Another motive besides selling another new, more secure, OS.
We can't believe that you don't know enough about security to stop a
teenager in high school from breaking into everybody's computers. Maybe if
it was a syndicate of 50 or so computer experts hired by organized crime
or a foreign government.
Or is it you built a house of wood and now people want it as strong as
steel and fireproof. So you put steel bars up, aluminum shingles, fire
alarm lights ... but it's still built of wood, is not as strong as steel
and will burn. From its conception was Windows developed to be "spy
software". Developed with holes so it could be broken into? You do
permanently store all the places we go on the internet and all our emails
while giving us delete buttons that don't really delete anything. Track
word and excel documents with MAC addresses. If it smells like a fish,
tastes like a fish, and feels like a fish, it probably IS one. An OS built
on holes and to fix them now would require you to tear the whole thing
apart. Go back to basics, start from scratch, and build a new one of steel
and not of wood with holes in it.
16 Oct 03 - Microsoft Corp. will offer McAfee
antivirus and firewall products to U.S. customers. An expected move since
Microsoft's alignment with McAffee and TrendMicro as reported on 20 May
03. Symantec is no longer smiling when they meet Microsoft in the hallway.
The monopoly grows! Now Micorsoft will try to take over the antivirus and
firewall industry.
20 Oct 03 - The first state Microsoft loses. Massachusetts
Administration and Finance Secretary Eric Kriss instructed the state's
chief technology officer to adopt a policy of "open standards, open
source" for ALL future spending on information technology.
24 Oct 03 -Microsoft Patches Its Patches - the two
patches issued on 15 Oct 03 that have been recalled are MS03-045 for
Windows and MS03-047 for Exchange. Three other patches were released as
well on the 15th, dealing with, among other things, authenticode
verification and buffer-overrun flaws that could be exploited to run code
on an unsuspecting user's PC.
28 Oct 03 - Microsoft will detail plans to DISABLE
the Windows Messenger Service and activate the Internet Connection
Firewall by default on Windows XP machines in an effort to protect
computers from malicious attacks, a company executive said Tuesday Oct 28
03. DISABLE and BY DEFAULT - Two key items we have been advocating for the
last three years in our editorials.
Not that we are smarter than Microsoft - they knew this and more. The
question is Why does Microsoft want an insecure operating system
(OS)?
1. they don't but they are STUPID, can't secure the system, and
it would cost too much money
#1 It could be the code is flawed at the core and to secure it would
mean they would have to go back to basics and start from scratch since
building on top of a flawed foundation is futile. A conclusion also
reached by Larry Seltzer (Technical Director of eWeek Labs) who comments
that "fixing the shatter attack problem at its core would mean making
basic changes to Windows. This would end up breaking a large number of
existing programs". And unless threatened by a competing OS Microsoft
will not begin tearing apart its Windows to improve security.
2. so that people will feel this one is BAD and be inclined to
buy the next new "most secure" OS
#2 Microsoft has already done this with XP and sales soared. Its a
good marketing strategy and we see no reason for this not to continue
unless there's competition.
3. if they secure it too well then Microsoft itself won't be
able to spy on its own system, us, and the world.
#3 It has already been proven there are many items in the MS OS's
that spy on users. MS did not sweat the court ordered breakup of its
company because they knew on appeal when it reached people "who knew
what type of intelligence Microsoft provides", that this would not
happen. If giving the CIA and feds holes and backdoors to our operating
systems helps keep our monopoly that's a small price to
pay.
4. Microsoft is positioning itself to be paid MILLIONS and
MILLIONS by the music and movie industries to provide them with
information on who is downloading their products so these industries can
sue the people involved.
#4 If Microsoft can use its "spy software" to make millions and
millions of dollars, it will. If they make it too secure then even
Microsoft won't be able to hack into the system. Besides that's why they
made it mandatory to register XP within 30 days so they knew who you
were. They know everything else that's on your computer.
5. Again making money. When a virus or worm attacks, the system
administrator sometimes has to call Microsoft for technical support and
Microsoft CHARGES for this support.
#5 It all comes down to Making Money and Keeping Our
Monopoly.
Five good reasons for Microsoft NOT to lockdown its operating systems.
We can't really think of one reason they would want to secure it.
Usually companies make a better product to increase sales. But people
have to buy our OS no matter what we do! So lets tell the people security
is our top priority, our next OS is the most secure ever BUT lets
work on something else.
Some Supporting Evidence: There should be an option in all Microsoft
email readers (Outlook and Outlook Express) to automatically convert HTML
email messages to plain text messages before they are displayed to prevent
viruses and worms from activating.
Note: the Mac Entourage email reader from Microsoft has this
feature included. Why does Microsoft secure the Mac OS and not its own
Windows? If you have a Mac and want the patch you can get it from
Microsoft here.
Sorry nothing for Windows.
Another example of Microsoft's refusal to secure its OS's is the
security zone High in IE. Why is scripting, and Java, and Active X marked
safe for scripting still enabled when you set the security to High? Any of
these things can allow viruses and worms to activate. The only way to
really make IE security High is to do it yourself in the Custom zone by
unchecking all of these things.
And there are many, many other examples in the way it structures its
services, user's rights, permissions etc...
04 Nov 03 - Novell buys
SuSE Linux for $210 million and Red Hat discontinues its Linux desktop OS
concentrating on its enterprise edition. Novell's CEO commenting "Novell
Linux will be the future of computing and Novell will be its leader". Also
today IBM has invested $50 million in Novell. The lines continue to be
drawn in the clash of IBM vs Microsoft. You pay SCO to crush Linux and
we'll pay Novell to keep it going. But the feds support us IBM. We can
payoff lobbyists too. Don't feel too "secure".
05 Nov 03 - The Chinese government plans to throw its financial
weight behind the Linux-based computer systems that could rival
Microsoft's Windows. China will build a domestic software industry around
Linux that can be copied and modified freely said China's Ministry of
Information. China's information technology market is growing at 20
percent a year, with software sales expected to reach $30.5 billion in
2005. That figure is the total sales for Microsoft worldwide in 2002.
05 Nov 03 - WANTED with or without your computer. Bounty on
all Black Hats. Microsoft is creating a $5
million reward program to help law enforcement identify and convict
those who illegally release worms, viruses and other types of malicious
programs on the Internet.
Microsoft said Wednesday the first two rewards it will offer will be
for information leading to the arrest and conviction of those responsible
for the spread of the Blaster worm and the SoBig virus unleashed earlier
this year.
Microsoft can't or won't secure its operating system but wants to make
it publicly known that it is very concerned about security.
Can't secure your operating systems with the resources you have against
an unemployed high school or college student. We don't believe it!
Your systems will never be secure unless you are forced to make it that
way by a serious threat from a secure Linux. Just as American automobile
manufacturers in the early 1970s never made a car that got more than 15
mpg until they were forced to by Japanese imports that got 30 mpg. They
were making Billions from the oil companies not to make that car.
The Redmond Giant: Our operating systems always had holes and were
always insecure but aren't we #1 in sales. Aren't our profits soaring each
year. Don't we control 95% of the market. But Boss
Keep sailing on the same course and leave those holes alone. We have
commitments to keep them there. But Boss the public is complaining about
our lack of security. Ahhh let'em complain. As long as we keep the
government happy with the intelligence information these holes help them
get, they will let us keep our monopoly. The federal government and soon
the music and movie industries need our holes so leave'em alone. OK Boss.
We're trying. In fact we're adding new holes for the ones the public makes
us patch and we're almost up to 5,000 holes now. Increasing our holes
(vulnerabilities) each year. In 1998 we had 262 holes, year 2000 there
were 1,090 holes and now with XP in 2002 there are 4,129 holes (based on
cert.org
statistics).
But we still need to maintain an image so can we put out press releases
telling the public how we're working on security and how security is #1 at
our company. Maybe put a bounty on the head of those people exploiting our
holes. Let's see a bounty. Then these cracksters will go deeper
underground and probably never be caught and be even more determined to
get us by writing more viruses and worms. Good Idea. OK. But remember I
don't want you to DO ANYTHING to the holes in our operating system. Leave
those holes alone. OK OK Boss.
09 Nov 03 - Is Microsoft Getting Desperate? A Bounty for
the first time - When the Blaster worm hobbled hundreds of thousands of
computers around the world in August it also hurt Microsoft's ability to
book new contracts with corporate customers. For the first time flaws in
Microsoft's security were translating into money lost. Maybe something
Microsoft will listen to.
11 Nov 03 - Microsoft's November 2003 security bulletin patches
three (3) holes in Windows 2000 and XP systems that it said were
"critical" security risks and a fourth problem with Microsoft
Office that the company rated "important." These holes could allow an
attacker to read / copy data off your computer or execute code of his
choice.
With each patch one must think. I've had this OS for three years and
you are just finding these holes. So if a hacker found the holes three
years ago he could of been using these holes and stealing my data all this
time. Yep. Windows - "the bottomless pit of holes"
As one unknown hacker phrased it on the internet:
"Keep patching. There are still plenty more holes where
these came from. Some we HAVE been using for three years and you still
haven't patched. Others we keep in reserve as you plug one hole we'll
start using another. PATCHING IS FUTILE. The architecture and
code of all your Windows systems are based on earlier versions of
Windows that were written before the internet, before the viruses and
worms we see today and without security in mind. You have built all your
present operating systems on top off this earlier developed flawed
foundation so your systems will just continue to be flawed."
13 Nov 03 - IBM to SCO (and its partner Microsoft) Put Up or
Shut Up. IBM has filed in court a "Reply Memorandum in Support of its
Motion to Compel Discovery". Either you have evidence we are stealing your
Unix code then lets see it OR you don't and the case should be dissmissed.
SCO also accussed IBM of entering into a conspiracy with other companies
to destroy Unix. Seems strange since it was SCO who aligned itself with
Microsoft to destroy Linux.
... continuing on 09 Dec 03 U.S. Magistrate Judge Brooke Wells on
Friday gave Lindon-based SCO until Jan. 23 to show where and how IBM's
Linux contributions misappropriated SCO's proprietary Unix code.
16 Nov 03 - Microsoft loses another country. Brazil,
South America's largest country turns towards Linux. Paying software
licensing fees to Microsoft is simply "unsustainable economically" when
you can run them on the open-source Linux operating system which is much
cheaper, says Sergio Amadeu, who was appointed by Brazil's President to
head the government's National Information Technology Institute.
19 Nov 03 - Microsoft isn't taking the criticism of its OS
security and inroads of Linux lying down. In an attempt to shift the focus
off its lack of security, the software giant will soon begin a media blitz
to blast the security of Linux.
Some skeptics promoting the idea that since Microsoft executives are on
record as saying (11 May 03) that it "must not lose to Linux under any
circumstances" and "must destroy this cancer", it has started a secret
D-Linux department consisting of crackers whose sole projects are
to write viruses, worms, and back-doors to Destroy-Linux. Could be?
Spokespersons for Linux commenting "Can't we all just get along".
20 Nov 03 - John
Thompson, chairman and CEO of Symantec Corp., said today in a keynote
speech at Comdex, the current practice of applying patches or virus
definitions will not be enough to stop future viruses and worms. Soon
computers will face "Warhol" threats that spread across the Internet and
infect systems worldwide within 15 minutes. These types of threats are
fundamentally unstoppable by today's technologies. We will need
proactive techniques.
We agree. There are already unstoppable viruses and worms with
multithreaded SMTP engines that use mass mailing techniques to spread
worldwide in 24 hours. We need an operating system that ASKS the user if
an application, process or program can run. Now they just infect and run.
26 Nov 03 - More in the Dike. New IE flaws allow attackers to
bypass a security check in IE, or to download and execute a malicious file
on a user's computer. It's another way to attack a machine via the Web or
by e-mail. Until a patch is provided, users are advised to move
favored Web sites to their protected "trusted sites" zone used for
personal accounts.
03 Dec 03 - In the latest of what is a suspicious string of
high-profile attacks on Linux, a cracker broke into one of the Linux
servers at Gentoo on 2 Dec 03. The attack on Gentoo follows closely a
similar attack in late November of a server belonging to the Debian
Project, which produces another distribution of Linux. Gentoo officials
said that the compromised server has both an intrusion detection system
and a file-integrity checker installed on it and are reasonably confident
the code was unharmed. The attack on the Debian Project was also thwarted.
05 Dec 03 - No more support for you. Microsoft phases
out many of its premier products that are still in use by thousands of
companies effective December 15, 2003. Surveys indicate that 40% of
company computers still use Win 98 and NT4. No further support or
purchasing of these products will be available from Microsoft. Buy our
new stuff!
Among them are Win 98 and Win NT4. In addition to SQL Server 7,
Office XP Developer and Office 2000 Developer editions; Office 20000
Premium Service Release 1; BackOffice Server 2000; Internet Security and
Acceleration Server (ISA) 2000; Internet Explorer 5.5; and Visual Studio 6
Microsoft Developer Edition.
Should I upgrade my OS? Microsoft will try to convince you to, cajole
you to, and finally force you to, by eliminating the old stuff and its
support, but our recommendations are don't do it. Our motto: "If your
existing system is stable and working, don\\rquote t fool with it. Not
even patches! If it ain't broke don't fix it. Sit back and use that 90% of
your time and money on company projects instead of learning how to
install, maintain, and operate a new system."
What if the car companies did this? No parts or repairs done on any car
over 5 years old. Buy a new car! They would go out of business. Especially
if the locks didn't work, the car had no security, and everboby was
stealing or vandalizing it every other day.
18 Dec 03 - Microsoft will phase out Windows 2000 beginning in
2004
to keep with its policy that operating systems be eliminated in 5 years
15 Jan 04 - Micosoft has felt the pressure and bad press. It
will continue to support Win 98, 98SE, and ME until 2006. Smart move since
this is no time to unduly antagonize your customers. Other choices are
emerging.
03 Feb 04 - Teenager
hacks U.S. Nuclear Weapons Research Lab. Great. Can the U.S. please keep
its sensitive agencies OFF the internet. You simply don't have the
expertise yet to keep from being hacked!
10 Feb 04 - Ooops! Another Patch? And this one six months after
brought to Microsoft's attention by researchers at eEye Digital Security
of Aliso Viejo, California, which discovered the new Windows flaws.
Microsoft on Tuesday 2/10/04 warned of a "critical" security vulnerability
that not only allows an attacker to run code on vulnerable machines, but
also enables him to install software and change and delete data.
The systems affected include all current Windows platforms including
Windows NT4, Windows 2000, Windows XP, Windows NT Server, Windows Server
2000 and Windows Server 2003.
Makes sense. All Windows operating systems have the same base code. A
pyramid effect.
11 Mar 04 - Microsoft warns of a security flaw in Outlook
upgrading its warning to "critical". Since the beginning of 2004,
Microsoft has released 10 security warnings, four of them rated as
critical.
31 Mar 04 - Windows XP SP2 to be released in June 2004 will
turn on many new and old features to increase security by DEFAULT. Among
them are a popup blocker and the XP firewall. In addition, all programs
that want to use the web will have to ask the OS if it can run. The way
its supposed to do. Then just say no.
16 Apr 04 - PC's infested
with Spy Programs! The US net provider EarthLink said it uncovered an
average of 28 spyware programs on each of over one million PC's scanned
during the first three months of 2004. This figure represents how real
identity theft or system corruption is for users. System monitors can
surreptitiously watch what you do, steal personal information and despatch
it across the web, while Trojans can allow malicious hackers to get access
to a computer and steal information.
Two of the best freeware programs to block these spy
programs are: Spybot Used
to search for and delete spy programs already on your computer.
and Spyblaster Used
to keep spy programs off your computer.
10 May 04 - An 18-year-old
German high school student working alone has admitted creating the
Sasser internet worm. The worm only works on the newest and most
secure Win XP and Win 2000 SP2 or higher operating systems.
26 May 04 - Privacy
concerns prompted Congress to kill the Pentagon's $54 million Total
Information Awareness program last September, but government computers are
still scanning a vast array of databases.
30 Jun 04 -
It's
Over!
The last appeal by the State of Massachusetts to Microsoft's six year
long antitrust case has been denied. An outcome that was not considered a
surprise by insiders.
18 Jul 04 - Patch XP with the new SP2 at your own risk. Norton
and others brace for impact. Many applications will
not work with Microsoft's new SP2 update for XP. Including Norton
Antivirus which runs on 100 million computers. Most company administrators
will do some intensive testing before applying this patch to avoid a visit
from the company's President when SP2 brings down the system.
06 Aug 04 -NASA powers
up with one of the world's biggest Linux-based supercomputers
at a cost of $160 million. It will have 500,000 GB of storage ( the
equivalent of 800,000 CDs) and use 10,240 Intel Itanium 2 processors.
15 Aug 04 - With very little news reporting - the Federal
Reserve will begin transferring the nation's money supply over the Internet.
Good Luck. We agree with comments in this article that even with
authentication, encryption, firewalls, and intrusion detection the best
systems will be vulnerable to hackers once you are on the internet. Why?
Much like Windows the internet was not initially designed with a focus on
security. The core code, its foundation, has holes and can easily be
hacked by knowledgeable intruders.
02 Sep 04 - What's wrong with Windows? One
of the BEST articles we have seen which details some of those items we
have been mentioning that should be DISABLED in the Windows operating
systems for increased security against hacks, wacks, and attacks. The
latest Win XP SP2 continues to enable about 80% of these items. The
optimum spy machine lives on. Note: If you use the internet you may need
the DNS Client if you don't specify your DNS servers and the DHCP Client
if your ISP connection requires it.
The Redmond Giant - Hey, if we made it secure you won't buy our new OS
"the most secure ever". Besides there's nothing you can do about it.
Customer - I'm not going to take it anymore. Since I already paid for
it I'm keeping my old OS. Security. I'll do it myself. Deactivate your Win
File Protection, change about 20 items in the registry, 25 system files,
and DISABLE about 30 services. I'm also buying a nice hardware firewall,
replacing your IE browser with Firefox, and your Outlook with Eudora.
Antivirus software and Patches don't work anymore. Computer
security requires a PROACTIVE approach. Downloading virus
signatures and OS patches amounts to no more than closing the gate after
your dog has already run out of it and into the streets.
Todays modern viruses and worms can spread to half the computers in the
world in one hour. It takes a month to get a patch ready, a week for
antivirus definitions. Too late. But if the virus or worm uses visual
basic - deactivate VBS scripting. If they use Active X - deactivate Active
X. And on and on ... You not only stopped that virus or worm but all
future ones that use this scripting language, this system file, or this
type of service.
Of course you will still be hacked but not as frequently. Its like
protecting your house. Getting bars on the windows, dogs in the yard, a
ten foot steel fence, closed circuit surveillance cameras, alarm system,
... but your house can still be broken into. Only not by as many people.
Note: Since Microsoft won't do this for you, you'll have to hire
someone or do it yourself. Remembering that securing your OS is rather
complex and should be done by a professional. Disabling services and
changing items in the registry can prevent certain applications to run but
it sure makes the latest Win XP SP2 and older OS's more secure. Its better
than any patch as this article
and us can attest to.
16 Sep 04 - Another
CRITICAL security hole in Win OS's when viewing JPG images. Next it
will be viruses in plain text files.
23 Sep 04 - Microsoft
to its 200 million customers not using XP - If you want the security
enhancements found in Win XP SP2 - Buy XP! We do not have plans to
deliver Win XP SP2 enhancements for Windows 2000 or other older versions
of Windows. Sorry. At least they are consistent.
Over 90% of the XP SP2 update focuses on providing security
enhancements for Internet Explorer (IE) and Outlook to prevent malware
from installing on user's computers. There are a number of significant
vulnerabilities in technologies relating to IE, the DHTML object model,
MIME type determination, RPC, DCOM, VBScript, the graphical user interface
(GUI), and Active X.
If you don't have XP and want most of what the SP2 updates does, our
advice is to change to the Firefox browser and Eudora email client.
Firefox does NOT use Active X or VB Scripting and if you really need it
you can switch to IE since Firefox will not delete IE from your computer.
This is good advice with any Windows OS (even XP) since holes and patches
will keep on coming.
This is what the nation's leading security organization CERT says: Use a different web
browser
"There are a number of significant vulnerabilities in technologies
relating to the IE domain/zone security model, local file system (My
Computer Zone) trust, the Dynamic HTML (DHTML) document object model (in
particular, proprietary DHTML features), the HTML Help system (CHM), MIME
type determination, the graphical user interface (GUI), and ActiveX. These
technologies are implemented in operating system libraries that are used
by IE and many other programs to provide web browser functionality. IE is
integrated into Windows (Microsoft even said this in its antitrust trial)
to such an extent that vulnerabilities in IE frequently provide an
attacker significant access to the operating system.
It is possible to reduce exposure to these vulnerabilities by using a
different web browser, especially when viewing untrusted HTML documents
(e.g., web sites, HTML email messages). Such a decision may, however,
reduce the functionality of sites that require IE-specific features such
as proprietary DHTML, VBScript, and ActiveX."
The Department of Homeland
Security recommends Firefox over IE. We've tested Firefox and it seems
secure and is easy to use. It imports all your favorites from Internet
Explorer with one click and you are ready to use it in about 10 min.
Microsoft has integrated Internet Explorer into the operating system
kernel. Creating a system where any hole in Internet Explorer opens your
entire Windows OS to an attack. The Firefox browser is modular and not
integrated to Windows. Therefore a hole in Firefox will crash or destroy
Firefox while leaving the Windows OS intact. Uninstall and reinstall
Firefox and you're back in action.
Another nice feature of this browser is its Tabs. You can enter any
number of websites in a folder and choose Open in Tabs. Say for 10
websites in a folder what this does is open the first one and while you're
reading it the other nine are being downloaded. So when you click the next
website tab it pops up immediately. Nice for those still on 56K dialup
modems.
You might also want to change to a ZoneAlarm, Sygate, or Symantec
Firewall since even with the SP2 update, Win XP still cannot block
outbound traffic with its Firewall.
08 Oct 04 - Over the past six months Symantec has documented
more than 4,496 new Windows (particularly Win32) viruses and worms. That's a
new virus every hour.
11 Oct 04 - Linux
surpasses the Macintosh OS on desktop computers. Microsoft has its Redmond
Red Eye staring at Linux. Concerned, Very Concerned.
12 Oct 04 - Twenty Patch
Tuesday. Microsoft issues twenty patches this month many of which are
deemed CRITICAL. Pluging eight holes in Internet Explorer, and twelve in
the Windows shell, SMTP, Excel, and Exchange.
The Corporate Administrator's Comments: "Ahhhhhhhhh!" While pulling at
his hair. You would think that if Microsoft was really securing its code
the OS's would need fewer patches because it's getting more secure. This
is the largest number of patches ever issued in one month.
14 Oct 04 - North American
Administrators WAIT to install Win XP SP2. Wise choice. Test it first
and then install it at your own risk as Microsoft says in its Agreement.
Microsoft won't be coming to fix your company network when the Boss comes
in yelling "Why is the system down".
Linux is still perceived as the most innately secure operating system
by 650 developers working in North America.
15 Oct 04 - Windows.
Prominent anti-spyware developer Webroot says it has yet to detect a
SINGLE Apple or Linux spyware program while it has detected over 15,000
for Windows. Makes sense, afterall the Windows code was written in order
to allow spy programs to operate.
16 Oct 04 - There
goes our jobs. The two biggest India based offshore IT OUTSOURCING companies (Tata and Wipro)
detailed sharp increases in hiring. Clear evidence of growing demand for
IT offshore services. India's outsourcing industry is expected to increase from $22 Billion to $60
Billion by 2010. Ireland and the Netherlands are right behind them.
16 Oct 04 - Microsoft's trustworthy computing initiative and
security is job #1 program is a Failure. Its
patches actually make security worse and people would do better to
stick with their older OS and install their own security measures rather
than rely on Microsoft.
That is the blunt assessment of one of the world's leading authorities
on Windows vulnerabilities - TruSecure senior scientist and NT BugTraq
list editor, Russ Cooper.
Starting with disabling about 60 insecure
services, applications, and items in the registry (that's the number we
have found).
Things like renaming the winnt\\system32\\MSHTA.EXE file. Save
it though because even you won't be able to use the add/remove programs
application in the ctl panel without it. The Mshta.exe or "HyperText
Application" interpreter is an extremely dangerous Microsoft program. It
is used by a large number of viruses and worms to execute their VBS
scripts that are given .HTA extensions.
Mshta.exe is required in order for these viruses and worms to execute.
Disabling Mshta will stop them. Note: Antivirus programs and firewalls
won't stop Mshta.exe from executing code since it is an internal Microsoft
system file (or another internal Microsoft Malware program).
17 Oct 04 - Researchers find
holes in XP SP2. Ways to circumvent many of the XP SP2 features are
being found. And the beat goes on. Are you sure your patches don't
introduce more holes than they plug?
19 Oct 04 - Cisco
and Microsoft announced an agreement to work together on security. The
IT giants aim to achieve compatibility between Cisco's Network Admissions
Control (NAC) and Microsoft's Network Access Protection (NAP) programs.
This should help. At least its better than Microsoft working alone on
security.
20 Oct 04 - Two
vulnerabilities for IE 6 It allows hackers to bypass the added Windows
XP security that came with SP2. Users are vulnerable to both
vulnerabilities unless they Disable Active X or change to Mozilla's
Firefox browser that doesn't use it.
03 Nov 04 - Another
critical hole in IE 6. Unlike some threats that necessitate action,
such as downloading files, the newest IE hole is penetrated without user
interaction.
11 Nov 04 - Windows
XP Service Pack 2 (SP2) has ten unpatched vulnerabilities. Many of
which are activated by user's simply viewing a website. Gone are the days
when you had to open an e-mail attachment or download and execute a file
before you could be infected.
18 Nov 04 - Paraphrasing Microsoft's top CEO Steve Ballmer ---
Use
Linux and Get Sued! Microsoft threatening legal action against users
of Linux while on the other hand investing in companies that promote it.
That's covering both bases and is consistent with their philosophy --- If
you can't beat them, buy them.
Microsoft CEO Steve Ballmer recently commented that the Linux operating
system violates 228 separate software patents, suggesting that Linux users
are likely to get sued for patent infringement. Not a single, specific
patent was identified. Not a single patent infringement lawsuit has been
filed against Linux.
It is interesting to note that while Microsoft continues to be sued for
several dozen patent infringements filed in the past few years, none have
been reported against Linux. Are these unfounded Microsoft tactics to
spread fear, uncertainty and doubt among those contemplating the adoption
of Linux?
It's clear that Linux continues to concern Microsoft because of its
lower cost, improved security, reliability, and performance.
24 Nov 04 - Microsoft
pays off Ed Black the President and CEO of the Computer and
Communications Industry Association (CCIA) to end its antitrust suit with
CCIA. He got a $10 million payoff which is half of the $20 million
settlement. Nokia and others who disagreed with this settlement resign
from the organization.
Black, one of Microsoft's oldest and most tenacious opponents, was
quoted as saying "Life is Good". Actually, he didn't. What he said was,
"Life is a constant reordering of priorities, and for important and
pragmatic reasons we are choosing to move on with regard to this matter."
06 Dec 04 - Creator of the PC and a giant in the field of
computing IBM sells its PC business to the Lenovo Group of China. This
will make Lenovo the third largest PC manufacturer in the world.
15 Dec 04 - Microsoft fixes a critical XP firewall issue. Users
who installed SP2 on their Windows XP machines and also have file and
printer sharing enabled may
have been sharing their files and printers with the entire Internet,
according to Microsoft.
17 Dec 04 - Microsoft announces the acquisition of Giant
Company Software, a New York-based anti-spyware vendor. Firewall,
Antivirus, and Antispyware companies be concerned. Microsoft plans to
put you all out of business by incorporating these applications in its
next OS release. Back in June 2003 Microsoft purchased RAV Antivirus and
continues to develop its Firewall. The question is with Micosoft's track
record in security whether anyone will trust a Micosoft Firewall,
Antivirus, or Antispyware program.
Irregardless Symantec is preparing for this by the purchase of Veritas
this week. Seeking to broaden its business base away from the competitive
security sector. Smart move. Don't put your eggs all in one basket!
08 Feb 05 - Patch Tuesday. Microsoft releases its February
monthly security bulletin. The release contains 13 Patches with 4 rated
as Critical.
16 Feb 05 - Is Microsoft asleep in Redmond while raking in
profits. Or has the company finally woken up by the ringing bell of
competition? At least for its IE browser there is and its name is
Firefox. But in an effort to shore up the poor security of
IE 6 Microsoft has announced a new version of its Internet Explorer
... IE 7 due to be released earlier than scheduled this summer.
17 Feb 05 - "I
couldn't care less about what Microsoft does" says Symantec CEO John
Thompson. This could be furthest from the truth as Microsoft Chairman Bill
Gates at the RSA Conference on 2/15/05 laid out a strategy that calls for
Microsoft to offer antivirus, antispyware and firewall technologies in an
effort to move deep into security market.
14 Mar 05 - Keyloggers Foiled In
Attempted $423 Million Bank Heist
15 Mar 05 - Micorsoft
confirmed it was penetrated by hackers and CEO Steve Ballmer said
"hackers did see some of our source code."
16 Mar 05 - More than one
million computers on the net have been hijacked to attack websites and
pump out spam and viruses.
28 Mar 05 - Beginning in a few months Microsoft will require
all Windows XP and Windows 2000 users to
validate their copy of Windows before they can download Updates and
Service Packs to clamp down on pirated copies of its software.
31 Mar 05 - Windows
Server 2003 SP1 was released today with updates to IE and Outlook
Express. It will include better authentication methods for RPC (remote
procedure call) and DCOM (Distributed Component Object Model) services
which suffered numerous attacks recently. Server 2003 SP1 will also bring
improved Wi-Fi management that include server-side integration of WPS
(Wireless Provisioning Services) and configuration improvements for Wi-Fi
policy group management.
12 Apr 05 - Microsoft releases patches for 18
flaws. Five are critical. Among the more serious holes are those
affecting Microsoft's IE Web browser software.
18 Apr 05 - The IRS
also is unlikely to know if outsiders are browsing through citizens tax
returns because it doesn't effectively police its computer systems for
unauthorized use, the Government Accountability Office found.
19 Apr 05 - Last August, when Microsoft released XP SP2, more
than 50 key third-party applications, custom applications and even a
number of Microsoft's own products broke when users attempted to run them
on top of the XP update. It appears the latest
Windows Server 2003 SP1 update has similar problems.
22 Apr 05 - Mainstream support from Microsoft for Windows NT4
ended on December 30, 2004 and the Redmond, Wash., software maker is set
to phase
out support for its Windows 2000 client and server releases on June 30,
2005. Windows 2000 is still the operating system of choice for a
number of businesses.
24 Apr 05 - Ballmer
and Microsoft change their tune "Linux is no longer a cancer" (see 11
May 03 above). Microsoft has promised that it will add Linux support to
its Virtual Server 2005 Service Pack 1, due by the end of the year. It
will be the first time a Microsoft product will get Linux support.
26 Apr 05 - Users of the latest 64-bit version of Microsoft's
Windows XP Professional x64 Edition operating system will not have the option to
install Norton or McAfee antivirus software. Microsoft did the same thing
with XP SP2 (see 17 Dec 04 above). Microsoft is presently in direct
competition with Antivirus, Antispware, and Firewall vendors.
28 Apr 05 - Microsoft Chairman Bill Gates urged the Bush
administration and lawmakers Wednesday to abolish immigration
limits on foreign computer engineers, programmers, scientists who can
be hired by U.S. companies.
Undersecretary of Commerce Phil Bond, a top Bush administration
technology official, pointed out that the unemployment rate for engineers
in the U.S. is above the national average.
30 Apr 05 - Chinese computer maker Lenovo has completed its
$1.75 billion purchase of IBM's personal computer division, creating the
world's third-largest PC maker, the company said Sunday. IBM lays off
13,000 of its employees.
12 May 05 - The Mozilla Foundation releases an updated version
of its browser Firefox 1.0.4.
13 May 05 - IBM backs Firefox. Encouraging its 300,000
employees to use the browser by giving them the ability to download it
from internal servers and get support from the IBM help desk.
15 May 05 - Microsoft officially enters into the antivirus
market with OneCare
to be released later this year. OneCare will guard against viruses, worms,
spyware, and also includes a new firewall that scans both incoming and
outgoing traffic. The firewall now included in Windows XP scans only
incoming traffic. Microsoft has been planning this move for some time with
its acquisition of antivirus software developer GeCAD, RAV antivirus, and
antispyware manufacturer Giant Company (see 17 Dec 04).
28 May 05 - Cuba
joins Brazil, India, South Africa, China, Germany, France, Russia and South Korea that are
some of the countries using various forms of Linux on a government level.
Motivating factors include cost (Linux is cheaper) and security (Microsoft
has hidden source code and is tied too closely to the U.S. government).
29 Nov 05 - Firefox 1.5 has arrived.
Replacing its 1.0.7 browser. Firefox is recommended by Aplus Omega for two reasons.
(1) It is not integrated to the Windows OS like Internet Explorer so an attact via the internet
with Firefox is less likely to corrupt your OS. (2) Hackers are not interested in hacking Firefox yet.
IE still has 85% of the market and this is where they get the most bang for their hack.
29 Nov 05 - As anticipated (15 May 05) by its past acquisitions, Microsoft has hit the street
with OneCare. An all-in-one security
suite that provides integrated antivirus, antispyware, and firewall capabilities. Make room for the Big Boy Symantec,
Sygate,
McAffee, ZoneAlarm, Spybot, ... And there was ONE.
01 Dec 05 - Massachusetts state agencies
(the only state not to agree to the Microsoft Monopoly deal) are planning to migrate to
OpenDocument compliant applications by Jan. 1, 2007. A change that will affect about 50,000 desktop PCs.
The move to adopt OpenDocument shuts Microsoft out of the state's procurement process because the software giant,
which dominates the office application market, has said it does not intend to support the OpenDocument format.
NOT. Microsoft Takes Action to Further Open Office.
Thanks Massachusetts. Your stand has made a difference.
02 Dec 05 - Diebold Inc., America's
largest provider of electronic voting equipment, came under scrutiny in California and North Carolina which requires
the release of all source code used in these machines. "It's not that we have an issue providing our source code," Diebold
said. "The problem is that the law requires us to provide not just our source code but also the code of third-party
vendors as well as the developers involved. We use Microsoft's Windows and I don't know who all the developers are for Windows. We don't
own it; we license the use of it." Want a sure bet. Watch Microsoft's campaign contributions in the next presidential
election. Whoever gets the most will win. They control the code. Change one line and a million or more votes
can go to whoever you want!
An update: On Mar 10 2006 the
Maryland
House votes to oust Diebold machines. It would replace $90 million worth of e-voting machines with systems offering a paper
trail. Good Job. That only leaves 35 other states they can change one line of code and shift millions of votes.
05 Dec 05 - Belfast, Northern Ireland
- Initiatives are under way to create an Open Source Center of Excellence across Ireland. The U.K. Office of Government
Commerce has already issued its final report on open-source software trials.
That report said that open-source software is a viable and credible alternative to proprietary software for
infrastructure implementations, and for meeting the requirements of the majority of desktop users.
06 Dec 05 - When Micorsoft Chairman Bill Gates begins a four-day visit to
India today, he'll see a country
moving increasingly toward open source.
07 Dec 05 - Strip
Windows or Else.
South Korea fines Microsoft $32 million for its antitrust violations. This follows a fine of $584 million against
Microsoft by the European Union last year. In the U.S. (where monopolies are now seemingly legal) Microsoft was
exonerated upon appeal.
13 Dec 05 - The entire Swiss Federal Government
(more than 3,000 servers) will run Novell's SUSE Linux.
13 Dec 05 - China's government promotes
and supports desktop Linux very strongly. About 30% of desktops in China now use Linux. Microsoft has about 60%. Compared
with Microsoft's 95% dominance in the US.
15 Dec 05 - Microsoft has issued its final set of scheduled software patches for 2005. Microsoft describes
the "critical" patch as a cumulative update. The patch fixes four vulnerabilities in Internet Explorer, some of which are
already being targeted by Trojan writers to give Users administrative rights and take control of the computer.
07 Jan 06 - WMF Vulnerability. What we've contended for years comes back again. Deleted email is never deleted (dbx files).
The sites you visit on the internet are always stored (index.dat files). Encryption keys you use are copied and stored. And more backdoors than you can count to retrieve this data and anything else once you're on the internet. It's a spy machine.
And now another backdoor in Windows is found. Here are some excerpts from programmer Steve Gibson of GRC.com.
Microsoft intentionally put a backdoor in Windows?
Steve: Yes. It's the only conclusion. I don't see how it could have been a mistake. Again, I'm going to continue to
look at it. But from what I've seen now, this had to be deliberate.
So you're saying Microsoft, or people at Microsoft, intentionally put code in Microsoft Windows that will
allow anybody who knew about it to access any Windows machine. And there'd be nothing anybody could do about it. Even if
ActiveX is turned off, security is up full, firewalls are on.
Steve: Yes.
To see if you are vulnerable to the WMF exploit use this checker by
hexblog.com. For more information on this OS flaw see ComputerWorld.
In this age of 9/11, terrorism, evil doers, and ordinary citizens being spied on without due process, could this have
been a request made to Microsoft by the government?
20 Jan 06 - You expect Microsoft to respond to a vulnerability? The WMF exploit was identified on Dec 27, 2006.
Microsoft said it would not release a patch until its next scheduled monthly update on Jan 10, 2006. Meanwhile millions were infected. McAfee customers reported 120,000 infections alone. With the advent of ZERO DAY EXPLOITS you can't rely on Microsoft patches or Antivirus Signatures.
They will always be too little too late. If you want security you've got to do it yourself. See our Top Ten Security Tips if you want to begin.
01 Feb 06 - The world's biggest computer maker, Dell, will be increasing
its employees in
India to 15,000
02 Feb 06 - Microsoft improves its Firewall in its new OS called Windows Vista (expected release the end of 2006).
The Firewall will finally support control over
both inbound and outbound traffic. The new support for outbound control
could put a serious damper on information leakage and will undoubtedly
reduce the number of systems that become assimilated into botnets.
Microsoft's Firewall is still NOT the sharpest tool in the shed.
It's Firewall still can't block ActiveX, JavaScript, and Java
applets before they reach the browser. Or filter specific URLs, block pop-up windows and cookies,
quarantine message attachments, and cache DNS requests like other Firewalls out in the market.
02 Feb 06 - Wipro Ltd., India's third-largest software exporter, with 46,000 employees and sales of
2.1 Billion annually will get a big chunk of GM's $15 Billion outsourcing contract. GM (the largest US auto manufacturer) giving jobs to thousands
in India while laying off 30,000
US employees in its auto plants. While Ford cuts 25,000 jobs
and Dell (the largest US computer manufacturer) gives 15,000 jobs to India.
The US job market? Gas prices? Health Care? Printing more and more money to pay for the war in Iraq. Increasing the deficit
to record levels and decreasing the value of the dollar worldwide (The White House expects the deficit to climb to $400 Billion in fiscal 2006).
Government corruption at the highest levels. Another war in Iran
by mid-2006? Oh we're fine.
03 Feb 06 - As part of its Total, OOps I mean Terrorist (they changed the name), Information network the US government has been seeking search data
from Google. The Electronic Privacy Information Center (EPIC) discusses this and has an excellent list of Privacy Tools.
04 Feb 06 - US Department of Justice (DOJ) hearing set for
Google to turn over
its records of people and what they search for and post on the internet! Not surprisingly Microsoft's MSN and Yahoo already have.
05 Feb 06 - A new Mozilla Firefox version 1.5.0.1 is released with minor security and stability enhancements.
08 Feb 06 - Users running Windows will be charged $50 each year for Micorsoft's
Antivirus Protection (One Care) to debut in June 2006. Symantec and McAffee unofficially commenting "Microsoft
doesn't want a piece of the pie. They want the whole thing".
09 Feb 06 - Man jailed in China by Yahoo's release of information. The online writer will be jailed for eight years for posting comments that criticised official corruption.
Is the stage being set for the same thing to happen in America?
13 Feb 06 - US company embeds
silicon chip in workers. RFID chips are inexpensive radio transmitters that give off a unique identifying signal that have been implanted in pets or attached to goods so they can be tracked.
15 Feb 06 - Dell
continues its ventures in India. Dell is working on plans to open a PC manufacturing facility in India. Dell currently operates a call center and a software development center in India.
17 Feb 06 - Google on Friday formally rejected the US Justice Department's subpoena of data from the Web
search leader,
arguing the demand violated the privacy of users Web searches and its own trade secrets. The Bush administration
is seeking to compel Google to hand over the data. Google is going it alone in opposing the U.S. government request.
Rivals Microsoft and Yahoo are among the
companies that have complied with the Justice Department demand for data
18 Feb 06 - Slowly but Surely. The stage is being set to track the world. The US Justice Dept says it
only wants data on what people seach for and not the people's identity. At least NOT right now.
While former U.S. Supreme Court Justice William O. Douglas has said "As nightfall does not come at once, neither does oppression. In both instances, there is a twilight when everything
remains seemingly unchanged. And it is in such twilight that we all must be most aware of change in the air however
slight lest we become unwitting victims of the darkness."
20 Feb 06 - A federal judge ordered the Department of Justice to release records related to the National
Security Agency's warrantless domestic
spying program by March 8, 2006 or else explain the legal basis under which the records cannot be released.
The order was handed down Feb. 16,2006 in a case brought against the Justice Department by the Electronic Privacy
Information Center.
22 Feb 06 - The European Committee for Interoperable Systems (ECIS)
deeply regrets that strong antitrust law enforcement appears to be the only way to stop the sustained anti-competitive
behavior of Microsoft. Maybe the EU can stand up to Microsoft. They got the officials in the US payed off. Found guility by
US District Judge Jackson but upon appeal to "higher authorities" Microsoft found innocent! Some pockets are being lined.
03 Mar 06 - India has a population 4x that of the US (1 Billion people). In India, an estimated 40% of Indians live on less
than $1 a day. President Bush said today the United States should see this rapidly growing nation as a land of opportunity.
In other words outsourcing and cheap labor. And signed an agreement to freely give India nuclear fuel, reactors and
the know-how to build more powerful nuclear weapons (but declined the same for Pakistan).
Rewarding India for not signing the Nuclear Non-Proliferation Treaty and giving it the capability to produce more
fissile material and more nuclear weapons than it otherwise could. Is that a wise decision Mr President?
At a time when we are attacking countries for trying to get nuclear
technology? At a time when more and more jobs are lost to outsourcing abroad?
Our largest companies (GM, Oracle,
IBM, Microsoft, Dell) have set up development, support, and business process outsourcing operations
in India at an ever increasing rate leaving Americans unemployed!
Bush also said he would like more H-1B visas to be issued to Indian engineers, scientists, and physicists so they
could get jobs in the US in addition to the US government recent port contract.
You're already outsourcing jobs abroad so might as well give them the jobs in the US too. There are no educated and
unemployed engineers or scientists here that can do the job. Right.
03 Mar 06 - Microsoft asked three US courts on Friday to force Sun, Oracle, IBM, and Novell
to produce documents pertaining to the European Union's (EU's) antitrust case against the software vendor.
It seems the EU won't bend over for you so you can stick it to them. The US surely will like last time. Smart move.
09 Mar 06 - Microsoft founder Bill Gates in first
place for the 12th straight year. His $50 Billion fortune increased by $3.5 Billion from the 2005 Forbes list.
"Making a billion just isn't what it used to be," observed Forbes Associate Editor Luisa Kroll, who noted that the number
of Billionaires had grown by more than 300 in the past three years. And the number of poor increased by the Billions
Worldwide in the past three years.
10 Mar 06 - Over the course of the last five years, we've lost 3 million manufacturing jobs.
We're watching Ford, we're watching General Motors, Delphi, company after company shut down manufacturing jobs in this
country. We watched 25 percent of the tool-and-die jobs in the country disappear.
The U.S. Department of Commerce today reported that the international deficit in goods and services trade reached a
record level of $726 billion in 2005, an 18% increase over 2004. The manufacturing sector has
lost 3 million jobs over the last five years, including 81,000 jobs in 2005, as the manufacturing trade deficit has
continued to expand. And now even Mr. President wants to outsource more jobs to the Saudis in a port contract? Are we against the people in India or the UAE? No but we are for the American people. A
bill should be introduced in Congress that forbids the US government to outsource jobs overseas until every American here has a job. The government is supposed to work for the people not large corporations or special interest groups.
11 Mar 06 - The European Commission, the executive body of
the European Union, on March 10 sent Microsoft a hard-hitting letter, telling the software maker that it was still out
of compliance with its antitrust order. "The material continues to be incomplete, inaccurate and unusable.
The improvements required to the documentation are not merely refinements or improvements to the text: the documentation
as it stands is unusable," the letter said.
16 Mar 06 - The agencies on the front line in the war on terror and security
the U.S. Department of
Homeland Security (DHS) and the U.S. Department of Defense (DOD) received an "F" on their cybersecurity scores by the House
of Representatives Government Reform Committee. Wow I feel real safe now.
21 Mar 06 - Two bugs
found in IE. Not to worry they will be patched on Apr 11, 2006. Hope your computer isn't compromised before then.
You just can't rely on Microsoft. The problem is related to the way the browser processes HTA files, Microsoft said in an e-mailed statement.
HTA files are associated with Web applications. Our proactive approach had already fixed this problem five years ago by having HTA files open in notepad. See our Security page.
29 Mar 06 - California
District Court Judge Trumbull denies Microsoft's request for access to Oracle and Sun documents for its case with the EU.
30 Mar 06 - Can you lower the odds of being outsourced?
05 Apr 06 - Microsoft gets help from CompTIA in its battle with the EU
12 Apr 06 - Florida state employees are being warned that their personal information may have been
compromised after work on the state's People First payroll and human resources system was
outsourced
to a company in India.
13 Apr 06 - Outsourcing of information technology and business services delivers average cost savings
of 15%.
20 Apr 06 - Firefox 1.5.0.2 browser is now available with significant security and stability improvements
25 Apr 06 - New zero day vulnerability found in fully patched versions of IE 6 and Microsoft Windows XP SP2. Secunia flagged the issue as "highly critical" and stressed that it can be exploited to corrupt a computer's memory.
28 Apr 06 - Microsoft expands its Beta browser testing It is offering free telephone support to consumers in the US, Germany and Japan who decide to try it out. The final version of IE 7 is expected to be released at the end of this year.
25 May 06 - The immigration
reform bill passed by the Senate on Thursday (May 25, 2006) will DOUBLE the number of high tech H1B visas granted
to foreign workers from the current 65,000 to 115,000. You think getting a job is hard now. US tech workers haven't
seen anything yet. Immigration reform = Let more immigrants in to keep the wages low and our high
paying campaign contributing corporate cronies happy. Thanks Congress!
02 Jun 06 - The US economy created 75,000 jobs in May, considerably below expectations, US Labor Department data shows. Many economists believe the US economy needs to create some 150,000 jobs each month in order to keep pace with population growth. Ahhh keep outsourcing. Who cares if Americans have jobs.
They are all incompetant. We have to hire abroad.
Incompetant or do the powers to be want cheap labor at any cost.
05 Jun 06 - Mozilla releases Firefox 1.5.0.4 which improves stability and includes several security fixes. Issues related to privilege escalation, file stealing, buffer overflow, potential memory corruption and other problems have been corrected in this release.
06 Jul 06 - Another lawsuit against Microsoft which was filed July 5, 2006 asked for class-action status on claims that Microsoft's Antispyware software mislead users as to its true purpose, failed to obtain consent before installing, and transmitted data to the Redmond, Wash. company's servers.
12 Jul 06 - Microsoft has been fined $357million by the European Commission (EC) for failing to comply with an anti-competition ruling. Fines of $3 million a day will come into force on July 31 if Microsoft fails to supply "complete and accurate" technical information to rival developers. Microsoft is expected to deliver
the final bundle of information for use by rival software firms on July 18. To the detriment of most Americans monopolies are now (for all practical purposes) legal in the US where its largest corporations now run the country.
08 Aug 06 - The U.S. Department of Homeland Security warned Wednesday that a recently patched Microsoft Windows vulnerability could put the nation's critical infrastructure at risk. The patch, described in Microsoft Security Bulletin MS06-040, was one of 12 holes fixed Tuesday by the software maker.
16 Aug 06 - Mozilla has released an update to its popular Firefox Web browser that fixes some vulnerabilities.
02 Oct 06 - Oracle under stiff competition from Sun, CA, IBM, and Microsoft entensifies its status in the security market by purchasing three companies specializing in security.
10 Oct 06 - Microsoft rolls out IE7. But because of the problems with Win XP SP2 which installed automatically as a high-proirity update, IE7 will prompt the user before automatically installing the new browser.
20 Oct 06 - Microsoft introduces IE 7 that is now available for download. The new version is the first browser upgrade in more than five years and incorporates many features that are found in Firefox 1.5 such as tabbed browsing.
24 Oct 06 - Not to be outdone, Mozilla introduces Firefox 2.0 that makes its debut today. Built into the updated browser are anti-phishing alerts, session restore, spell checking, suggested searches, and several other enhancement and additions to its last version 1.5. Still a step ahead of Microsoft's IE 7 on security and features.
06 Nov 06 - Microsoft prefers Suse Linux and not market leader Red Hat Linux. Microsoft inked an agreement with Novell promising not to sue users of Suse Linux for patent infringement but left the option open on Red Hat.
20 Nov 06 - SANS predicts a dramatic increase in zero day attacks for 2007. Be proactive and follow our security tips.
04 Dec 06 - Win new OS Vista finally incorporaties a two-way firewall which blocks not only inbound traffic like Win XP does but also outbound traffic. Vista also attempts to create a profile which users run with limited local rights instead of Administrator privileges.
11 Dec 06 - More than half of all business PCs can't run Vista. The bare bones minimum is a 1 GHz CPU and 512 MB of RAM.
15 Jan 07 - Symantec improves its Security Information Management (SIM) product to gain on leaders ArcSight, NetForensics, and Network Intelligence. SIM products pull relevant information from security logs of large corporations. At present these systems are too costly for small businesses.
10 Jun 07 - According to the NY Times the top antitrust official at the Justice Department Thomas O. Barnett in May 2007 urged state prosecutors to reject a confidential antitrust complaint filed by Google that is tied to a consent decree that monitors Microsoft’s behavior.
State officials also said that they could not recall ever receiving a request by any head of the Justice Department’s antitrust division to drop any inquiry before this one. The Bush Administration has supported Microsoft in other antitrust skirmishes as well.
It's payback time for fixing those Diebold voting machines in Florida and Ohio baby!
12 Jun 07 - Microsoft's patch Tuesday includes security updates for 15 vulnerabilities of which half are rated "critical". The patches help to shut loopholes in Internet Explorer, Outlook Express, Windows Mail and Windows Vista.
|