EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

04.17.10

First Time, Shame on You — Second Time, Shame on Microsoft

Posted in DRM, Microsoft, Security, Windows at 5:17 pm by Dr. Roy Schestowitz


Direct link

Summary: Microsoft’s Restrictions Management Service is broken again and Windows XP is again left vulnerable with Microsoft unwilling to address the issue

Microsoft’s Restrictions [sic] Management Service (RMS) is broken yet again, proving — as always — that Microsoft cannot handle encryption properly because it is not reusing good code like Free software typically does. From The H we learn that:

An implementation flaw allows attackers to bypass the encryption mechanism used for Microsoft Office documents. Although this isn’t news, having been made public in 2005, no (officially acknowledged) attack or tool for exploiting the vulnerability has existed until now. Which probably explains why Microsoft has never fixed the problem with an update for older versions of Office.

French crypto expert Eric Filiol in his presentationPDF at the recent Black Hat security conference emphasised that the situation has now changed. He says his tool can decrypt a document within a few minutes. Filiol said he began working on the statistical analysis of the RC4 algorithm used in Office back in 1994. Talking to heise Security, the expert explained why he has only now published his results: “I was employed by the French military at the time. Everything I did was classified. Now I am free speak about it.”

In other news, Microsoft is seemingly blaming users for flaws in Windows that enabled rootkits to be installed. More curiously, “Microsoft refuses to patch infected Windows XP machines,” according to PC Pro. [via]

Microsoft has revealed that its latest round of patches won’t install on XP machines if they’re infected with a rootkit.

Back in February, a security patch left some XP users complaining of endless reboots and Blue Screens of Death. An investigation followed and Microsoft discovered the problems occurred on machines infected with the Alureon rootkit, which interacted badly with patch KB977165 for the Windows kernel.

This would not be the first time that Microsoft leaves XP permanently unpatched, even by choice. Such utter negligence [1, 2, 3] can lead to loads of zombie PCs that everyone — not just Windows users — will suffer from and pay for. So where is the liability? Microsoft insists that the public should pay the price for Microsoft’s negligence [1, 2, 3, 4, 5, 6, 7] and some people are currently paying the price in the form of blackmail. [via]

PCs using file-share sites and publishes the user’s net history on a public website before demanding a fee for its removal.

The Japanese trojan virus installs itself on computers using a popular file-share service called Winni, used by up to 200m people.

Suffice to say, this “Japanese trojan virus” would not install itself on anything other than Windows, but the article above is from the MSBBC [1, 2, 3, 4, 5, 6, 7, 8] and thus it addresses toddlers who equate “computers” with “Windows”. it’s like stating that cars in general — not just Toyota cars [1, 2] — have a fatal flaw.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. IAM is Wrong, the Narrative Isn't Changing, Except in the Battistelli-Funded (at EPO's Expense) Financial Times

    The desperate attempts to change the narrative in the press culminate in nothing more than yet another misleading article from Rana Foroohar and some rants from Watchtroll



  2. The Federal Circuit Continues Squashing Software Patents

    Under the leadership of Sharon Prost the Court of Appeals for the Federal Circuit (CAFC) continues its war on software patents, making it very hard to remember the last time it tolerated any



  3. SUEPO Representatives Like Elizabeth Hardon Vindicated as Battistelli's Detrimental Effect on Patent Quality is Widely Confirmed

    Feedback regarding the awful refusal to acknowledge patent quality crisis at the EPO as well as the appointment of a President so close to Battistelli (who most likely assures continuation of his policies)



  4. Links 17/10/2017: KDE Frameworks 5.39.0, Safe Browsing in Epiphany

    Links for the day



  5. Judge Bryson Rules Against Allergan After It Used Native American Tribes to Dodge Scrutiny of Patents (IPRs); Senator Hatch Does Not Understand IPRs

    Having attempted to dodge inter partes reviews (IPRs) by latching onto sovereign immunity, Allergan loses a key case and Senator Hatch is meanwhile attempting to water down IPRs albeit at the same time bemoaning patent trolls (which IPRs help neutralise)



  6. Rumours That António Campinos Initially Had No Competition at All (for Battistelli's Succession) Are Confirmed

    Succession at the EPO (mostly French) shows that there's little room for optimism and Battistelli's people are too deeply entrenched in the upper echelons of the EPO



  7. EPO Stakeholders Complain That the New Chairman Does Not Grasp the Issues at the EPO (or Denies These)

    Some information from inside the EPO’s Administrative Council, whose Chairman is denying (at least to himself) some of the core issues that render the EPO less competitive in the international market



  8. Another Misleading Article Regarding Patents From Rana Foroohar at the Financial Times

    In an effort to promote the agenda of patent maximalists, many of whom are connected to the Financial Times, another deceiving report comes out



  9. Monika Ermert's Reports About the Crisis at the EPO and IP Kat's Uncharacteristically Shallow Coverage

    News from inside the Council shows conflict regarding the quality of European Patents (granted by the EPO under pressure from top-level management)



  10. Patent Troll VirnetX a Reminder to Apple That Software Patents Are a Threat to Apple Too

    VirnetX, a notorious patent troll, is poised to receive a huge sum of money from Apple and Qualcomm is trying to ban Apple products, serving to remind Apple of the detrimental impact of patents on Apple itself



  11. Links 16/10/2017: Linux 4.14 RC5, Debian 9.2.1, End of LibreOffice Conference 2017

    Links for the day



  12. The Systematic Erosion of Workers' Rights and Holidays at the EPO Goes Years Back

    The legitimacy of the staff's concerns at the EPO, having seen basic labour safeguards being shredded to pieces by Battistelli for a number of years (predating even the escalation of the conflict)



  13. Articles in English and German Speak About the Decline in Quality of European Patents (Granted by the EPO)

    Heise and The Register, two sites that have closely watched EPO affairs for a number of years, speak about the real problem which is declining patent quality (or rushed examination) -- a recipe for frivolous litigation in Europe



  14. Software Patents and Patent Trolls Not a Solved Issue, But the US is Getting There

    A media survey regarding software patents, which are being rejected in the US in spite of all the spin from law firms and bullies such as IBM



  15. US Patent Trolls Are Leaving and the Eastern District of Texas Sees Patent Cases Falling by More Than Half

    The decline of patent aggression in the US and the patent microcosm's response to Justices, having ruled in TC Heartland, curtailing patent trolls



  16. Qualcomm's Nightmares Are Getting Worse as Antitrust Questions Are Raised and Assessed

    Qualcomm is getting itself deeper in trouble as fines pile up and its multi-billion dollar dispute with Apple isn't getting it anywhere



  17. Forget About Apple; Two of the Leading Phone Makers (Samsung and Huawei) Are Bickering Over Patents

    Massive Android OEMs, Huawei and Samsung, are in a big patent dispute and this time, for a change, China is a legal battleground



  18. Tim Heberden From the Glasshouse Advisory is Throwing Stones in a Glasshouse to Create Patent Litigation

    IAM's latest lobbying, aided by the patent microcosm, for a climate of feuds and disputes (to line the pockets of the litigation 'industry')



  19. Access to Medicine is More Important Than Patents

    Some of the latest news about patents that impede/deny access to crucial medication; strategic litigation from the generics sector, seeking to invalidate patents and then offer low-cost alternatives



  20. Links 14/10/2017: Windows Breaks Dutch Law, Wine 2.19 Released

    Links for the day



  21. The Patent Trial and Appeal Board (PTAB) Supported by Congress, a Federal Judge, Soon to be Supported by the Supreme Court Too?

    The Patent Trial and Appeal Board is still widely defended, except by the patent microcosm which likes (and profits from) patent trolls and litigation Armageddon



  22. Patents Are Turning BlackBerry and Nokia, Which Used Android, Into Anti-Android Fronts That Tax Android OEMs

    The Canadian BlackBerry has sued BLU in the US only to compel it to pay 'protection' money; Nokia's patents are being scattered to trolls, which are doing something similar (without risking litigation themselves)



  23. The Unified Patent Court (UPC) is Rotting Like the European Patent Office

    The Unitary Patent litigation pipe dreams (or prosecution/trolling fast lane), which Battistelli's EPO long relied on, turn out to be the road to nowhere



  24. Lying and Faking Now a Standard Procedure at the European Patent Office

    The European Patent Organisation (EPO) under the leadership (or chairmanship) of Christoph Ernst continues to relay lies from Battistelli's Office, SUEPO rejects these, the Office lies about SMEs, prioritises Microsoft (again), and probably buys fake Twitter "followers"



  25. Links 13/10/2017: X.Org Server 1.19.5, pfSense 2.4, Final Stages of Ubuntu 17.10

    Links for the day



  26. Truly Terrible 'Journalism' About António Campinos Boils Down to Lobbying and Agenda-Pushing

    The expectedly shallow coverage of the appointment (succession) of Battistelli's French pick, which will likely change nothing of significance at the European Patent Office (EPO)



  27. Under Christoph Ernst, the Council is Just a Megaphone of Battistelli's EPO, Including on Patent Quality

    The Administrative Council of the EPO does not appear to be interested in a serious, adult, scientific debate about the quality of European Patents (EPs) and is instead relaying lies from Benoît Battistelli



  28. Links 12/10/2017: Cutelyst 1.9.0, Qt Creator 4.5 Beta

    Links for the day



  29. The Hogwash Begins: Patent Microcosm's Media Pretends Campinos is Anything But Battistelli's French Succession Plan

    A survey of media coverage regarding António Campinos, the French person whom Benoît Battistelli selected as his successor at the EPO



  30. Patent Quality at the EPO (European Patents) is Slipping While Battistelli's Office Boasts “Expansion of Early Certainty” (Even Worse)

    The EPO is staring down the abyss as high-level EPO management, quite frankly as usual, looks for new ways to further exacerbate patent quality (for superficial gains in the number of granted patents) rather than improve it


CoPilotCo

RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

CoPilotCo

Recent Posts