12.02.10

Gemini version available ♊︎

Wikileaks Reveals Microsoft Involvement in US Security Policy

Posted in Microsoft, Security, Windows at 7:10 pm by Dr. Roy Schestowitz

Summary: Wikileaks and Microsoft discussed, especially in the context of security

OUR daily links this week have been filled with reports about Wikileaks. That site’s fate is important to us because we too host material from close to 10,000 confidential Microsoft documents. It’s not about whether Wikileaks is “irresponsible” or not; it is about freedom of information and freedom of speech.

One new Wikileaks leak caught our attention because it speaks about the Iraq war (invasion in some people’s eyes) and it says that “Karim Ramadan (Microsoft) praised the historic role of USAID in Egypt” (we have mentioned USAID in relation to the Gates Foundation as USAID is accommodated by former Gates Foundation staff [1, 2, 3, 4, 5, 6, 7, 8, 9]).

“Those leaks just provide some more evidence to back the obvious.”This post is not about foreign policy or about USAID, but the point to be made is that Microsoft is involved in politics, even quite directly. Those leaks just provide some more evidence to back the obvious. Wikileaks is merely a messenger/host as the material is raw. And speaking of which, Julian Assange is the author/co-author of surfraw (Free software and Debian/GNU assist transparency and affect politics).

How far will the world go with so much sensitive information available to everyone (bar censorship, e.g. in China)? Amazon has been pressured by US politicians to kick Wikileaks out, Google is slowly indexing the latest leaks (that’s how we found the Microsoft mention), and as for Microsoft… well, based on search at this moment it only indexed 46 pages from cablegate.wikileaks.org whereas Google did well over a thousand. Does anyone take Bong [sic] seriously at all? Microsoft only gets users by paying for them and it comes at a cost of like $3 billions in losses online per year. Having indirectly ensured that even fast boot Linux software like Express Gate depends on Windows, the company is now signing a deal with SplashTop to put Bong [sic] search/toolbar in it, as Phoronix helps reveal:

It was precisely one month ago I was wondering what happened to SplashTop and found the company that we jump-started by our first-in-the-world coverage was still pushing out their instant-on Linux OS to various OEM vendors but they have lost their roots of using the Linux environment embedded on a motherboard’s flash chip to instead being nestled away on the user’s hard drive, which defeats much of its uniqueness and benefits (not to mention it was hacked by Phoronix readers). SplashTop, which was formerly named DeviceVM before the company took up the same name as their premiere product, also started pushing out Apple iPad applications in recent months. Today the company is announcing another set of peculiar changes to their instant-on Linux OS.

[...]

Today’s SplashTop announcements can be read on their blog. There’s also the SplashTop beta page for installing the beta version of their Bing+Chromium-ified SplashTop OS, but it must be installed via Microsoft Windows.

Fortunately the world is heading towards Linux on a large proportion of newly-sold PCs (even if just in the form of fast-booting OS). Schneier believes that software monoculture (monopoly) contributes to the reality where one in two Windows PCs is estimated to be a zombie PC. As Schneier explains right now:

The basic problem with a monoculture is that it’s all vulnerable to the same attack. The Irish Potato Famine of 1845–9 is perhaps the most famous monoculture-related disaster. The Irish planted only one variety of potato, and the genetically identical potatoes succumbed to a rot caused by Phytophthora infestans. Compare that with the diversity of potatoes traditionally grown in South America, each one adapted to the particular soil and climate of its home, and you can see the security value in heterogeneity.

Similar risks exist in networked computer systems. If everyone is using the same operating system or the same applications software or the same networking protocol, and a security vulnerability is discovered in that OS or software or protocol, a single exploit can affect everyone. This is the problem of large-scale Internet worms: many have affected millions of computers on the Internet.

Can Schneier name that “same operating system” or would that have him risk the label “Microsoft hater” [1, 2, 3]? In any event, now that Microsoft’s Charney lobbies to change security legislation [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12], the above leak is worth remembering.

Bruce Schneier
Bruce Schneier photo by sfllaw

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

A Single Comment

  1. NotZed said,

    December 3, 2010 at 8:40 pm

    Gravatar

    “Can Schneier name that “same operating system” or would that have him risk the label “Microsoft hater” [1, 2, 3]?”

    But that is his point precisely. It doesn’t matter which operating system it is – although right now it is microsoft windows – it is that mono-cultures are weak and vulnerable, and diversity is strong.

DecorWhat Else is New


  1. Links 8/12/2021: FreeBSD 12.3, EasyOS 3.1.13, and WordPress 5.9 Beta 2

    Links for the day



  2. [Meme] EU Assurances

    The EPO‘s staff cannot be blamed for losing patience as elected public representatives completely fail to do their job (with few exceptions)



  3. Clare Daly (GUE/NGL) Does What Every Public Official in Europe Should Have Done About EPO Shenanigans

    There’s another (new) push to hold the EPO accountable, seeing that the overseers clearly do not do their job and instead cover up the abuses



  4. Links 7/12/2021: Firefox 96 Beta and Fedora 37 Abandons ARMv7

    Links for the day



  5. Links 7/12/2021: Plasma Mobile Gear 21.12 and Tails 4.25

    Links for the day



  6. All IRC Logs Now Available as GemText Over Gemini Protocol

    Today we've completed the transition from plain text over gemini:// to GemText over gemini:// for IRC logs



  7. IRC Proceedings: Monday, December 06, 2021

    IRC logs for Monday, December 06, 2021



  8. [Meme] Rowing to the Bottom of the Ocean

    The EPO‘s Steve Rowan (VP1) is failing EPO staff and sort of “firing” workers during times of crisis (not at all a crisis to the EPO’s coffers)



  9. EPO Gradually Reduced to 'Fee Collection Agency' Which Eliminates Its Very Own Staff

    Mr. Redundancies and Mr. Cloud are outsourcing EPO jobs to Microsoft and Serco as if the EPO is an American corporation, providing no comfort to long-serving EPO staff



  10. Linux Foundation 2021 Annual Report Made on an Apple Mac Using Proprietary Software

    Yes, you’re reading this correctly. They still reject both “Linux” and “Open Source” (no dogfooding). This annual report is badly compressed; each page of the PDF is, on average, almost a megabyte in size (58.8 MB for a report of this scale is unreasonable and discriminates against people in countries with slow Internet connections); notice how they’re milking the brand in the first page (straight after the cover page, the 1991 ‘creation myth’, ignoring GNU); remember that this foundation is named after a trademark which is not even its own!



  11. Links 7/12/2021: OpenIndiana Hipster 2021.10 and AppStream 0.15

    Links for the day



  12. Microsoft “Defender” Pretender Attacks Random Software That Uses NSIS for installation; “Super Duper Secure Mode” for Edge is a Laugh

    Guest post by Ryan, reprinted with permission



  13. Links 6/12/2021: LibreOffice Maintenance Releases, Firefox 95 Finalised

    Links for the day



  14. “Wintel” “Secure” uEFI Firmware Used to Store Persistent Malware, and Security Theater Boot is Worthless

    Guest post by Ryan, reprinted with permission



  15. No Linux Foundation IRS Disclosures Since 2018

    The publicly-available records or IRS information about the Linux Foundation is suspiciously behind; compared to other organisations with a "tax-exempt" status the Linux Foundation is one year behind already



  16. Jim Zemlin Has Deleted All of His Tweets

    The Linux Foundation‘s Jim Zemlin seems to have become rather publicity-shy (screenshots above are self-explanatory; latest snapshot), but years ago he could not contain his excitement about Microsoft, which he said was "loved" by what it was attacking. Days ago it became apparent that Microsoft’s patent troll is still attacking Linux with patents and Zemlin’s decision to appoint Microsoft as the At-Large Director (in effect bossing Linus Torvalds) at the ‘Linux’ Foundation’s Board of Directors is already backfiring. She not only gets her whole salary from Microsoft but also allegedly protects sexual predators who assault women… by hiring them despite repeated warnings; if the leadership of the ‘Linux’ Foundation protects sexual predators who strangle women (even paying them a salary and giving them management positions), how can the ‘Linux’ Foundation ever claim to represent inclusion and diversity?



  17. Microsoft GitHub Exposé — Part IX — Microsoft's Chief Architect of GitHub Copilot Sought to be Arrested One Day After Techrights Article About Him

    Balabhadra (Alex) Graveley has warrant for his arrest, albeit only after a lot of harm and damage had already been done (to multiple people) and Microsoft started paying him



  18. The Committee on Patent Law (PLC) Informed About Overlooked Issues “Which Might Have a Bearing on the Validity of EPO Patents.”

    In a publication circulated or prepared last week the Central Staff Committee (CSC) of the EPO explains a situation never explored in so-called 'media' (the very little that's left of it)



  19. Links 6/12/2021: HowTos and Patents

    Links for the day



  20. IRC Proceedings: Sunday, December 05, 2021

    IRC logs for Sunday, December 05, 2021



  21. Gemini Space/Protocol: Taking IRC Logs to the Next Level

    Tonight we begin the migration to GemText for our daily IRC logs, having already made them available over gemini://



  22. Links 6/12/2021: Gnuastro 0.16 and Linux 5.16 RC4

    Links for the day



  23. Links 5/12/2021: Touchpad Gestures in XWayland

    Links for the day



  24. Society Needs to Take Back Computing, Data, and Networks

    Why GemText needs to become 'the new HTML' (but remain very simple) in order for cyberspace to be taken away from state-connected and military-funded corporations that spy on people and abuse society at large



  25. [Meme] Meanwhile in Austria...

    With lobbyists-led leadership one might be led to believe that a treaty strictly requiring ratification by the UK is somehow feasible (even if technically and legally it's moot already)



  26. The EPO's Web Site is a Parade of Endless Lies and Celebration of Gross Violations of the Law

    The EPO's noise site (formerly it had a "news" section, but it has not been honest for about a decade) is a torrent of lies, cover-up, and promotion of crimes; maybe the lies are obvious for everybody to see (at least EPO insiders), but nevertheless a rebuttal seems necessary



  27. The Letter EPO Management Does Not Want Applicants to See (or Respond to)

    A letter from the Munich Staff Committee at the EPO highlights the worrying extent of neglect of patent quality under Benoît Battistelli and António Campinos; the management of the EPO did not even bother replying to that letter (instead it was busy outsourcing the EPO to Microsoft)



  28. IRC Proceedings: Saturday, December 04, 2021

    IRC logs for Saturday, December 04, 2021



  29. EPO-Bribed IAM 'Media' Has Praised Quality, Which Even EPO Staff (Examiners) Does Not Praise

    It's easy to see something is terribly wrong when the people who do the actual work do not agree with the media's praise of their work (a praise motivated by a nefarious, alternate agenda)



  30. Tux Machines is 17.5 Years Old Today

    Tux Machines -- our 'sister site' for GNU/Linux news -- started in 2004. We're soon entering 2022.


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts