EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

05.09.09

U.S. Federal Aviation Administration (Windows Shop) Gets Cracked Again

Posted in Microsoft, Security, Windows at 6:34 am by Dr. Roy Schestowitz

Loading

Corollary: People may start caring about computer security not when businesses become less productive but when disaster eventually strikes

WE’VE already shown that the U.S. Federal Aviation Administration (FAA) is relying on a great deal of Windows [1, 2], so it’s not surprising to find it getting cracked again. From the news:

i. FAA admits problems with hackers

According to CNET, the US Federal Aviation Administration has admitted that hackers have broken into the air traffic control mission-support systems several times in recent years. In one case they managed to become ‘insiders’ to the network.

ii. Report: Hackers broke into FAA air traffic control systems

Hackers have broken into the air traffic control mission-support systems of the U.S. Federal Aviation Administration several times in recent years, according to an Inspector General report sent to the FAA this week.

Also in the news in recent days:

i. Researchers Release Bootkit Code Targeting Windows 7

Dubbed Vbootkit 2.0, the software was first presented by researchers Vipin Kumar and Nitin Kumar at the Hack In The Box security conference in Dubai in April. At the conference, the two researchers demonstrated how attackers could circumvent security features implemented in the kernel and gain control over Windows 7 (x64).

ii. Microsoft to patch ‘critical’ PowerPoint hole

Microsoft plans to patch a hole in its PowerPoint presentation program, the company said in an advanced bulletin that was notable because it contained only a single update.

iii. Botnet master hits the kill switch, takes down 100,000 PCs

Those behind the Zeus botnet recently decided to press the big red button, bluescreening 100,000 computers around the globe. Security experts aren’t sure why yet, although they have some ideas.

iv. Windows and Viruses – Made for each other

This is the screenshot of the cnet’s download.com which shows the most popular downloads for windows. The first five positions are taken by anti-virus software :-). Sadly there is no ‘Linux’ download section but ‘Mac’ has a place.

v. Microsoft ‘fixes’ its malware problem

Computerworld has an Microsoft WGA/WAT spokesman quoted as saying: “When we went out and talked to customers, we found that activation was the concept that resonated most strongly with them”.

The quote ends there, but may have ended: “…Like memories of the first time they were kicked in the groin.”

In any case, Microsoft’s draconian licensing enforcement ‘technology’ is malware by its own definition. And it’s forced on the user through EULAs of questionable legality.

There is no advantage to it for the user, only advantages for Microsoft. And renaming it won’t make it more attractive to users or any more palatable.

Maybe someday, smart users will stop buying software products that have a built-in remote off switch.

Name changes never resolve problems, except for perceptual problems.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

6 Comments

  1. Needs Sunlight said,

    May 9, 2009 at 7:11 am

    Gravatar

    Keep in mind, the FAA knows better and has experienced at least one Windows- based shutdown of the World’s eighth largest economy:

    http://www.techworld.com/opsys/news/index.cfm?newsid=2275

    http://www.securityfocus.com/news/9729

    http://www.ccsce.com/pdf/Numbers_CA_Rank.pdf

    FWIW, California is ranked just behind Italy.

    Roy Schestowitz Reply:

    Yes, it’s a Windows problem.

    The Los Angeles Times reported that the outage was the result of a worker neglecting to perform a monthly reset of a Windows-based control system, resulting in its automatic shutdown after 49.7 days of operation. A backup system also failed.

    Microsoft server crash nearly causes 800-plane pile-up

    twitter Reply:

    The FAA has made some tennative moves away from M$, but apparently has not made the jump to sanity. In 2006, they moved some servers to Red Hat. In 2007 they said no to Vista and considered dumping Windows completely for GNU/Linux. The FAA’s CIO, David Bowen, was quoted at the time about “business case” and problems with compatibility and continued availability of XP rather than security and freedom. He mentions security here but OS is not part of the discussion. A sane discussion would be about getting Windows out of airports entirely because a single compromised machine can do a lot of damage. Every airport I visit has M$ junk prominently placed, often with big error messages displayed instead of information. The FAA has the authority to fix this and should.

    When reading these stories, it is difficult to know if the incompetence comes from the reporter or the FAA. Bowen’s background is in economics and business which is decried, somewhat unfairly here. An older CV is published here. No mention of computing languages or development is made, which may be why it has taken him so long to see the value of free software despite managing so many computers over the last 25 years. He has a guilty hand in the health care mess, having come from Blue Shield. Still, we know how well managed most of the press is when it comes to M$ trash. It is no more surprising to find smears against anyone in power who considers moving to GNU/Linux than it is to find complete incompetents in power. At this point, competent people not only realize what a security disaster Windows is, they realize how it is designed to never properly interact with other systems. Competent people do what Lowes did, they migrate completely away and do so at once. Bowes has indicated he thinks this way, but it is impossible to tell through the reporting that I have found.

  2. ricardo nunes said,

    May 9, 2009 at 7:43 am

    Gravatar

    OSOR – The Swiss company Skysoft has started development of Albatross, a set of open source applications for air traffic controllers. The project’s website was unveiled on 16 March.

    The software will be published under a GNU Public Licence. The company has not yet decided which version of the GPL will be used.
    http://www.osor.eu/news/company-opens-development-airport-traffic-management-software

  3. Al said,

    May 12, 2009 at 1:54 am

    Gravatar

    It is the incompetence of the security and administration that causes theese problems everys single time. And you people think running open source is a good idea for these morons?? If they can not properly administer a Windows environment how the hell do you expect them to to deal with Linux or Unix??? Please tell me?? So the Windows bashing may be all well and good but let’s get the facts strait in any one of the cases like this you had incompetent people as the cause.. When a competent staff and sound policy is in place Windows is just as secure as Linux! Is it much more expensive? Yes … Does it offer the freedom? No…. But do not blame Windows for complete incompetence!!!!

    Hey we are talking about government here so incompetence is a given!!!

    Think about it the FAA is bueracracy and the follow the government model…

    Spend way more than neccessary… Hire any moron that is related or a friend the let them give their moron friends and relatives jobs… Next pay them entirely to much for doing far to little … After that let them take off whenever they want, throw in double time and a half holiday pay for every holiday possible…. Then when it goes wrong blame the taxypayers and corporations!!!

    Yet so many seem to embrace this idea shouting while they rob us blind knowing our taxes are going sky high in the future no matter what you make and yet we shout YES WE CAN…

    Give in to the Obama/Gates (General Electric,NBC,Microsoft) connection….

    Roy Schestowitz Reply:

    NBC ‘news’ is a wholly separate issue. :-)

What Else is New


  1. Links 25/7/2016: Linux 4.7 Final, PostgreSQL 9.6 Beta 3

    Links for the day



  2. Leaked: Boards of Appeal Face 'Exile' or 'Extradition' in Haar After Standing up to Battistelli

    A look at some of the latest moves at the European Patent Office (EPO), following Battistelli's successful coup d’état which brought the EPO into a perpetual state of emergency that perpetuates Battistelli's totalitarian powers



  3. The US Government Accountability Office (GAO) Comes Across as Against Software Patents, Relates to the EPO as Well

    Some analysis of the input from the Government Accountability Office (GAO) with focus on the EPO and software patents



  4. In the US, Patent Trolls Engage in Patent Wars and Shakedowns, Whereas in China/Korea Large Android OEMs Sue One Another

    Highlighting some of the differences between the US patent system and other patent systems



  5. Links 24/7/2016: Elive 2.7.1 Beta, New Flatpaks and Snaps

    Links for the day



  6. Links 23/7/2016: Leo Laporte on GNU/Linux, Dolphin Emulator’s Vulkan Completion

    Links for the day



  7. Links 22/7/2016: Wine 1.9.15, KaOS 2016.07 ISO

    Links for the day



  8. Haar Mentioned as Likely Site of Appeal Boards as Their Eradication or Marginalisation Envisioned by UPC Proponent Benoît Battistelli

    Not only the Staff Union of the European Patent Office (SUEPO) is under severe attack and possibly in mortal danger; the increasingly understaffed Boards of Appeal too are coming under attack and may (according to rumours) be sent to Haar, a good distance away from Munich and the airport (half an hour drive), not to mention lack of facilities for visitors from overseas



  9. EPO Attaché Albert Keyack Viewed as Somewhat of a Mole, Reporting From the US Embassy in Brazil Until Shortly Before the Temer Coup

    Public responses to the role played by Albert Keyack on behalf of the United States inside the European [sic] Patent Office



  10. EPO Insiders Explain Why the EPO's Examination Quality Rapidly Declines and Will Get Even Worse Because of Willy Minnoye

    Public comments from anonymous insiders serve to highlight a growing crisis inside the European Patent Office (EPO), where experienced/senior examiners are walking away and leaving an irreplaceable bunch of seats (due to high experience demands)



  11. Patents Roundup: BlackBerry, Huawei, PTAB, GAO, Aggressive Universities With Patents, and Software Patents in Europe

    Various bits and pieces of news regarding patents and their fast-changing nature in the United States nowadays



  12. Glimpse at Patent Systems Across the World: Better Quality Control at the USPTO Post-America Invents Act (2011), Unlike the EPO Post-Battistelli (2010)

    While the EPO reportedly strives to eliminate pendency and appeal windows altogether (rubberstamping being optimal performance as per the yardstick du jour), the USPTO introduces changes that would strengthen the system and shield innovation, not protect the business model of serial litigants



  13. Blockstream Has No Patents, But Pledges Not to Sue Using Patents

    Blockstream says that it comes in peace when it comes to software patents, which triggers speculations about coming Blockchain patent wars



  14. Links 21/7/2016: Ubuntu 16.04.1 LTS, Linux Mint 18 “Sarah” Xfce Beta

    Links for the day



  15. Links 21/7/2016: An Honorary Degree for Alan Cox, Looks Back at DebConf16

    Links for the day



  16. EPO USA: Under Battistelli, the 'European' Patent Office Emulates All the Mistakes of the USPTO

    Conservative Benoît Battistelli is trying to impose on the European Patent Office various truly misguided policies and he viciously attacks anyone or anything that stands in his way, including his formal overseers



  17. Links 19/7/2016: ARM and Opera Buyout

    Links for the day



  18. Large Corporations' Software Patenting Pursuits Carry on in Spite of Patent Trolls That Threaten Small Companies the Most

    With unconvincing excuses such as OIN, large corporations including IBM continue to promote software patents in the United States, even when public officials and USPTO officials work towards ending those



  19. Battistelli Has Implemented De Facto EPO Coup to Remove Oversight, Give Himself Total Power, and Allegedly Give UPC Gifts (Loot) to French Officials

    Benoît Battistelli's agenda at the EPO is anything but beneficial to the EPO and suspicions that Battistelli's overall agenda is transitioning to the UPC to further his goals grow feet



  20. EPO Social [sic] Report is a Big Pile of Lies That Responsible Journalists Must Ignore

    A reminder of where the EPO stands on social issues and why the latest so-called 'social' report is nothing but paid-for propaganda for Battistelli's political ambitions



  21. Links 18/7/2016: Vista 10 a Failure, FreeType 2.7

    Links for the day



  22. Exploiting Perceived Emergencies/Disasters, Suspending the Rule of Law, and Suspending Judges: How Erdoğan is Like Battistelli, Except the Coup

    Pretexts for crackdown on law-abiding people or figureheads who are remote and independent the hallmark not only of Erdoğan but also the EPO's President, Benoit Battistelli



  23. The Impotence of Gene Quinn

    Attacking the enforcer of Alice v CLS because it's doing harm to his source of income, which makes him angry



  24. After the FTI Consulting-EPO Reputation Laundering Deal's Expansion in Germany Süddeutsche Zeitung 'Forgets' That the EPO Even Exists

    Relative apathy if not complete silence regarding the EPO at Süddeutsche Zeitung following reports of FTI Consulting's deal expansion (media positioning in Germany), with hundreds of thousands of Euros (EPO budget) thrown at the controversial task



  25. Benoît Battistelli and Persistratos

    Reminds you of someone?



  26. Whistleblower Protection Desperately Needed at the European Patent Office

    EPO scandals are not publicly accessible or known to many people and not many such scandals are known at all because people are afraid of Battistelli's Fabius Maximus strategies



  27. Microsoft and Its Patent Minions at Nokia Still Have Patent Stacking Ambitions Against Android/Linux OEMs

    Weaponisation of European companies for the sake of artificial elevation of prices (patent taxes) a growing issue for Free/Open Source software (FOSS) and those behind it are circulating money among themselves not for betterment of products but for the crippling of FOSS contenders



  28. [ES] ¿Que si la EPO Bajo Battistelli Se Arruina Sin Posibilidad de Reparación Como la UPC?

    La última evidencia alrededor del hundimiénto de la reputación de la Epo y su calidad de trabajo, así como la caída del sistema que Battistelli trata forzadamente de imponer (una carrera al fondo)



  29. [ES] La EPO de Battistelli, Quién Quiebra la Ley, Subvierte el Curso de la Justicia y Rechaza Obedecer las Ordenes de la Corte Dice lo Impensable en Medio de los Actos de Terror

    Los terribles ataques hace un dia en Francia están siéndo explotados por el caradura de Benoît Battistelli para comedia negra o un verdaderamente absurda afirmación en la sección de “noticias” de la EPO



  30. [ES] La EPO de Battistelli Continúa Cortejando a Officiales de Países Pequeños y su Propaganda de Beneficiar a las “PYMEs de Aquellos Países”

    El caradura de Benoît Battistelli prosigue desfilando en los países pequeños que tienen delegados al Consejo Administrativo (CA) y los explota para propaganda barata, no sólo para que lo apoyen en las reuniónes del CA


CoPilotCo

RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

CoPilotCo

Recent Posts