02.18.10

Gemini version available ♊︎

Microsoft’s General Manager of ‘Trustworthy’ Computing Quits as TPM Gets Cracked

Posted in DRM, GNU/Linux, Hardware, Kernel, Mail, Microsoft, Standard at 8:53 pm by Dr. Roy Schestowitz


Summary: More cornerstones of Microsoft’s lock-in break apart and Outlook too is suffering from serious issues

DEPARTURES from Microsoft carry on as the company is failing [1, 2, 3, 4]. The latest Microsoft manager to jump ship will add to Amazon poison (many former Microsoft executives are moving there, e.g. [1, 2]), but the most interesting detail was his professional focus at Microsoft:

Microsoft has lost another key employee to Amazon.com. George Stathakopoulos, a computer security expert who’d been with Microsoft for nearly two decades, took a job at Amazon, Microsoft spokesman Lou Gellos confirmed. Stathakopoulos was general manager of the Trustworthy Computing Group at Microsoft and was front and center in Microsoft’s efforts to combat the Conficker worm last year.

“Trustworthy Computing Group,” eh? What an Orwellian title/name for the group.

For those who have not heard yet, Microsoft’s Xbox DRM is going down the loo. Here is one report about the subject (published yesterday):

Hardware hacker Christopher Tarnovsky just wanted to break Microsoft’s grip on peripherals for its Xbox 360 game console. In the process, he cracked one of the most heavily fortified chips ever put into a consumer device.

[...]

Its genesis came when Tarnovsky learned that manufacturers of video game controllers had to obtain a license from Microsoft for the peripherals to work on the Xbox 360. The requirement offended his sense of fair play, so he put his reverse engineering muscle to breaking it.

“I was very surprised they would put a security chip in a wired controller, as well as a wireless controller,” he said. “It’s very monopolistic what they’ve done. They have a right to do it, but I have a right to break it too.”

[...]

Using the tungsten as microscopic bridges, Tarnovsky said, he can digitally clone chips used to prevent piracy of satellite TV service, to disable unauthorized cartridges in printers – or to make Xbox game controllers.

“You could counterfeit this chip,” he said, although he stressed he had no plans to use the hack for illegal purposes.

One of our readers “thought that the boot sequence in WinTEL hardware was restricted such that unauthorised software couldn’t get on to it,” according to mail he sent us last night regarding TPM getting cracked. He adds: “Remember how dual-boot couldn’t work anymore if Bitlocker was active? It’s called Trusted Platform Module (TPM) and utilised a ‘trusted boot pathway’. Why isn’t the big story that TPM is broken?”

Well, actually, is it being reported and circulated more widely while we write this. Attempts to put TPM in Linux will hopefully fail too; it’s a case of security as lock-in, to use the words of Bill Gates. Our Linux DRM warnings go a while back as it's a curse, not a feature or a blessing. There is a similarity here.

For those who think that Microsoft DRM/TPM is the only thing breaking today, here is another one to have a field day with:

Outlook bug creates monster e-mail files

Microsoft is trying to fix a bug in the e-mail program Outlook 2010 Beta that creates unusually large e-mail files that take up too much space.

They just cannot implement things properly, can they? They also ignore mail storage standards, which helps not at all.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

8 Comments

  1. Yuhong Bao said,

    February 18, 2010 at 9:31 pm

    Gravatar

    ““Trustworthy Computing Group,” eh? What an Orwellian title/name for the group.”
    Don’t confuse Trustworthy Computing with Trusted Computing, only the latter is Orwellian.

    Roy Schestowitz Reply:

    There is nothing “Trustworthy” about Windows.

    And by the way, there is no confusion. I didn’t blend TPM with DRM (which also can relate to Tivoization) and the “Trustworthy Computing Group”.

    your_friend Reply:

    There is nothing trustworthy about any non free software.

    Have you seen this developing scandal, where a US school system used school issued laptop cameras to spy on grade school students? Remember the , in Lenovo/TPM roll out NSW and other school systems [2]? Look at the same bogus excuses and language that inverts the trust relationship and makes the child the untrustworthy criminal to be monitored. If ever there was a good case against non free software and TPM, this is it.

    This is the future non free software companies want for us and why they killed the OLPC program. Instead of a roll out of millions of cheap, free software devices that encourage sharing and real learning, we see expensive deployments of user hostile software that’s not even well suited for corporate cube. Sharing eliminates the power of incumbent publishers and telco companies, so they hate your freedom.

    Roy Schestowitz Reply:

    I didn’t know about Blake J. Robbins v. Lower Merion School District. Thanks for that.

  2. Yuhong Bao said,

    February 18, 2010 at 10:00 pm

    Gravatar

    “he sent us last night regarding TPM getting cracked. ”
    Last words point to an article unrelated to TPM.

    Roy Schestowitz Reply:

    Here are some better links from the news (our reader sent a rootkit case):

    http://www.h-online.com/security/news/item/Hacker-extracts-crypto-key-from-TPM-chip-927077.html
    http://www.bit-tech.net/news/bits/2010/02/10/tpm-security-cracked-wide-open/1
    http://www.theinquirer.net/inquirer/news/1591069/ex-army-bloke-us-ready-cyber-war
    http://www.google.com/hostednews/ap/article/ALeqM5j-OodvoFRhEcpfvnK5C7YL6JWJBQD9DO79A81

    Yuhong Bao Reply:

    Thank you, one of these is what the link should have been pointing to.

    Roy Schestowitz Reply:

    Well, thanks a lot for spotting this.

DecorWhat Else is New


  1. Links 18/1/2022: GNOME 42 Alpha and KStars 3.5.7

    Links for the day



  2. IRC Proceedings: Monday, January 17, 2022

    IRC logs for Monday, January 17, 2022



  3. Links 17/1/2022: More Microsoft-Connected FUD Against Linux as Its Share Continues to Fall

    Links for the day



  4. The GUI Challenge

    The latest article from Andy concerns the Command Line Challenge



  5. Links 17/1/2022: digiKam 7.5.0 and GhostBSD 22.01.12 Released

    Links for the day



  6. IRC Proceedings: Sunday, January 16, 2022

    IRC logs for Sunday, January 16, 2022



  7. Links 17/1/2022: postmarketOS 21.12 Service Pack 1 and Mumble 1.4 Released

    Links for the day



  8. [Meme] Gemini Space (or Geminispace): From 441 Working Capsules to 1,600 Working Capsules in Just 12 Months

    Gemini space now boasts 1,600 working capsules, a massive growth compared to last January, as we noted the other day (1,600 is now official)



  9. [Meme] European Patent Office Space

    The EPO maintains a culture of illegal surveillance, inherited from Benoît Battistelli and taken to a whole new level by António Campinos



  10. Gemini Rings (Like Webrings) and Shared Spaces in Geminspace

    Much like the Web of 20+ years ago, Gemini lets online communities — real communities (not abused tenants, groomed to be ‘monetised’ like in Facebook or Flickr) — form networks, guilds, and rings



  11. Links 16/1/2022: Latte Dock 0.11 and librest 0.9.0

    Links for the day



  12. The Corporate Cabal (and Spy Agencies-Enabled Monopolies) Engages in Raiding of the Free Software Community and Hacker Culture

    In an overt attack on the people who actually did all the work — the geeks who built excellent software to be gradually privatised through the Linux Foundation (a sort of price-fixing and openwashing cartel for shared interests of proprietary software firms) — is receiving more widespread condemnation; even the OSI has been bribed to become a part-time Microsoft outsourcer as organisations are easier to corrupt than communities



  13. EPO's Web Site Constantly Spammed by Lies About Privacy While EPO Breaks the Law and Outsources Data to the United States

    The António Campinos-led EPO works for imperialism, it not only protects the rich; sadly, António’s father isn’t alive anymore and surely he would blast his son for doing what he does to progress his career while lying to staff and European citizens



  14. Links 16/1/2022: Tsunami and Patents

    Links for the day



  15. IRC Proceedings: Saturday, January 15, 2022

    IRC logs for Saturday, January 15, 2022



  16. Links 16/1/2022: Year of the GNU/Linux Desktop and Catch-up With Patent Misinformation

    Links for the day



  17. Patrick Breyer, Unlike Most German Politicians, Highlights the Fact That Unified Patent Court (UPC) and Unitary Patent Are Incompatible With EU Law

    A longtime critic of EPO abuses (under both Benoît Battistelli and António Campinos leadership), as well as a vocal critic of software patents, steps in to point out the very obvious



  18. Links 15/1/2022: Flameshot 11.0 and Libvirt 8.0

    Links for the day



  19. Blogging and Microblogging in Geminispace With Gemini Protocol

    Writing one’s thoughts and other things in Geminispace — even without setting up a Gemini server — is totally possible; gateways and services do exist for this purpose



  20. Links 15/1/2022: Raspberry Pi in Business

    Links for the day



  21. IRC Proceedings: Friday, January 14, 2022

    IRC logs for Friday, January 14, 2022



  22. Gemini Clients: Comparing Moonlander, Telescope, Amfora, Kristall, and Lagrange (Newer and Older)

    There are many independent implementations of clients (similar to Web browsers) that deal with Gemini protocol and today we compare them visually, using Techrights as a test case/capsule



  23. 2022 Starts With Censorship of Christmas and Other Greetings at the EPO

    The nihilists who run the EPO want a monopoly on holiday greetings; to make matters worse, they’re censoring staff representatives in their intranet whilst inconsistently applying said policies



  24. Links 14/1/2022: FFmpeg 5.0 and Wine 7.0 RC6

    Links for the day



  25. White House Asking Proprietary Software Companies That Add NSA Back Doors About Their Views on 'Open Source' Security

    The US government wants us to think that in order to tackle security issues we need to reach out to the collective 'wisdom' of the very culprits who created the security mess in the first place (even by intention, for imperialistic objectives)



  26. Links 14/1/2022: EasyOS 3.2.1 and Qt 6.3 Alpha

    Links for the day



  27. Scientific Excellence and the Debian Social Contract

    The Debian Project turns 30 next year; in spite of it being so ubiquitous (most of the important distros of GNU/Linux are based on Debian) it is suffering growing pains and some of that boils down to corporate cash and toxic, deeply divisive politics



  28. Links 14/1/2022: openSUSE Leap 15.2 EoL, VFX Designers Are Using GNU/Linux

    Links for the day



  29. IRC Proceedings: Thursday, January 13, 2022

    IRC logs for Thursday, January 13, 2022



  30. 2022 Commences With Microsoft-Themed (and Microsoft-Connected) FUD Against GNU/Linux

    A psychopathic Microsoft, aided by operatives inside the mainstream and so-called 'tech' media, keeps spreading old and invalid stigma about "Linux" and Free software; few people still bother responding to these fact-free FUD campaigns, which boil down to ‘perception management’ PR/propaganda


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts