EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

11.13.09

If Microsoft Cannot be Sued Over Liability, Can it be Sued for Negligence?

Posted in Law, Microsoft, Security, Vista 7, Windows at 1:19 pm by Dr. Roy Schestowitz

“Our products just aren’t engineered for security.”

Brian Valentine, Microsoft executive

Summary: Microsoft’s inability (or unwillingness) to protect customers from severe flaws raises important questions regarding negligence

AS WE stressed last year, Microsoft publicly addresses flaws it is aware of only/usually when attacks begin. Otherwise, Microsoft lies about security. It tells what shareholders want to hear. So although the test of liability may not pass legal muster, negligence does. Should Microsoft be sued as some journalists have already suggested?

The latest serious exploit that affects Vista 7 (there are more examples appended at the bottom of this post) is so valuable for showing how Microsoft ignores security problems and improperly handles them until it’s too late. SJVN argues:

I do wonder sometimes about Microsoft’s quality assurance. No, I tell a lie. I always wonder about Microsoft’s quality assurance. As in, “How can they keep making mistakes like this?” In the latest, a new SMB vulnerability has been found and exploited that can lock-up any Windows 7 or Server 2008 R2 system.

As reported in ComputerWorld, Laurent Gaffie posted details of the vulnerabilities, along with proof-of-concept exploit code, to the Full Disclosure security mailing list today, as well as to his personal blog. Gaffie claimed that his exploit crashes the kernel in Windows 7 and its server sibling, Windows Server 2008 R2, triggering an infinite loop. Or, as he puts in so well in the exploit’s code: “‘Most Secure Os Ever’ –> Remote Kernel in 2 mn. #FAIL,#FAIL,#FAIL”

[...]

Oh, and Microsoft, hurry up and fix this. OK? This is embarrassingly bad.

This is not just “embarrassingly bad”, it is practically very bad because exploit code is already out there while Microsoft is still “investigating”.

Microsoft has reportedly begun investigating a potentially nasty denial of service vulnerability affecting Windows 7.

Microsoft has been caught hiding vulnerabilities and their fixes (secret fixes which invisibility of proprietary software enables), probably for raves about numbers, i.e. illusion of safety. How long has Microsoft known about this for and why is there no patch yet?

On Vista 7 insecurity:

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. Index: G 2/19 (Enlarged Board of Appeal, EPO)

    G 2/19 (Enlarged Board of Appeal, EPO)



  2. EPO Looney Tunes – Part 4: G 2/19 - Faites Vos Jeux…

    "Josefsson needs to bring in the “desired result” for his political masters in the Administrative Council if he wants to be in with a chance of reappointment."



  3. Media Not Interested in G 2/19, Which Demonstrates Patent Justice is Nowadays Impossible at the EPO

    The EPO spreads patent injustices to other countries and courts; the media is miraculously enough not interested, almost as though there's a coordinated blackout



  4. Librethreat Database Updated

    Database which keeps track of variants of attack vectors on Free/libre software now includes two more forms of threat



  5. A Look Back (and Forward) at Friendly Programming

    Historical perspective on computer languages and how to do better



  6. Red Hat's Freedom Reduced to Just Online Partner Enablement Network (OPEN) and Microsoft as a Close Partner; Canonical's Ubuntu Just an 'App' for Windows?

    Free software is being snapped up by proprietary software giants and patent bullies that treat it as little more than an 'add-on' for their proprietary offerings



  7. Linux Foundation Apparently Celebrates Sysadmin Day With a Microsoft Windows Site!

    The Linux Foundation shows ‘love’ to actual GNU/Linux (the real thing) by apparently rejecting it and badmouthing it



  8. EPO Looney Tunes – Part 3: The Legal Line-up for G 2/19

    The deck appears to have already been stacked for G 2/19, a decision on EPO judges' exile to Haar (veiled disciplinary action/collective punishment by those whom the judges are supposed to 'oversee')



  9. Links 17/7/2019: VirtualBox 6.0.10 and Mageia 7.1 Releases, Mint Betas

    Links for the day



  10. Links 16/7/2019: Btrfs Gets 'Cleaned Up', Clonezilla Live 2.6.2-15

    Links for the day



  11. EPO Looney Tunes - Part 2: The “Difficult Legacy” and Its Dark Historical Shadow

    Assuming that he was informed, then it seems fair to say that Battistell’s little “joke” at the expense of the Boards was in very bad taste



  12. EPO Noise Machine Turned On as Haar Hearing Kicks Off, Patrick Corcoran Defamed Again

    The EPO does not want people to hear about Haar; it just wants people to hear about how wonderful the EPO is and there are some who have just decided to slander Patrick Corcoran again



  13. Microsoft is 'Doing Kamikaze' (神風) on Linux

    An analogy for what the Linux (only in name!) Foundation and Microsoft mean to Linux — or by extension to GNU/Linux and Free software whose largest repository Microsoft took control of



  14. The 'New' Linux.com Sometimes Feels Like a Microsoft Promotion Site

    Anything that the ‘Linux’ Foundation touches seems to turn into its proprietors’ agenda; one of those proprietors is Microsoft, which has a "Jihad" against Linux



  15. IBM is a Threat to the Internet, Not Just to Software Development (Due to Software Patents Aggression)

    IBM continues its aggression against technology — a fact that’s even more distressing now that IBM calls the shots at Red Hat



  16. EPO Looney Tunes - Part 1: Is D-Day Approaching for Battistelli’s “Difficult Legacy”?

    European patent justice isn’t working within the premises of EPOnia; a bunch of ‘show trials’ may in fact turn out to be just that — a show



  17. Links 16/7/2019: LXD 3.15, Q4OS 3.8 and D9VK 0.13f

    Links for the day



  18. Links 15/7/2019: Vulkan 1.1.115 and Facebook Openwashing

    Links for the day



  19. Microsoft Office 360 Banned

    OpenDocument Format (ODF, a real standard everyone can implement) and Free/libre software should be taught in schools; it's not supposed to be just a matter of privacy



  20. Microsoft, in Its Own Words...

    Sociopathy, incompetence and intolerance of the rule of law, as demonstrated by Microsoft's top managers



  21. Microsoft's WSL is Designed to Weaken GNU/Linux (on the Desktop/Laptop) and Strengthen Vista 10

    What Microsoft does to GNU/Linux on the desktop (and/or laptop) bears much resemblance to what Microsoft did to Java a couple of decades ago



  22. Links 14/7/2019: Linux 5.2.1, Unreal Engine 4.23 Preview, Linux Mint 19.2 Beta

    Links for the day



  23. 25,500 Blog Posts and Pages

    With our thirteenth anniversary just a few months away we're at a pace of about 2,000 posts per year



  24. With WSL Microsoft is Doing to GNU/Linux What It Did to Netscape

    Embrace, extend, extinguish. Some things never really change even if they become an old and repetitive accusation.



  25. Allowing Bad Guests to Become the Hosts

    Why the so-called 'Linux Foundation', a nonprofit that acts more like a PAC controlled by proprietary software companies and people who don't even use Linux, is increasingly becoming a Linux-hostile front group



  26. Honesty and Collaboration Make Free Software Stronger, Microsoft is Inherently a Misfit

    In spite of all the lies Microsoft and its Web sites spew out on a daily basis, nothing has really changed and Microsoft is still attacking Software Freedom (mostly from the inside nowadays, helped by FUD proxies such as WhiteSource and Snyk)



  27. Patent Certainty Waning, But That's Still OK for Patent Trolls

    Patent maximalism remains a threat to everyone but patent lawyers (and patent office chiefs who measure their own performance only by the number of patents granted); best served are the patent trolls who extrajudicially attack already-impoverished parties behind closed doors



  28. GitHub is Microsoft's Proprietary Software and Centralised (Monopoly) Platform, But When Canonical's Account There Gets Compromised Suddenly It's Ubuntu's Fault?

    Typical media distortions and signs that Microsoft already uses GitHub for censorship of Free/Open Source software that does not fit Microsoft's interests



  29. Canonical is Turning Ubuntu Into a More Proprietary Deviant of GNU/Linux

    Ubuntu is becoming more 'Ubinary'; binaries without their source code available are packed up and cooked up for (or baked into) the ISO; this may be good for widespread adoption, but it's not an advancement of freedom, a capitulation rather



  30. Links 13/7/2019: Librem 5 July Update, Project Trident 19.07, KDE Frameworks 5.60.0

    Links for the day


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts