02.14.11

Gemini version available ♊︎

Whitewashing Inherent Windows Flaws

Posted in Microsoft, Security, Windows at 2:33 pm by Dr. Roy Schestowitz

Light effects

Summary: New examples of security reports that lack an important ingredient which is an explanation about them being applicable to just one platform

LONG-ESTABLISHED platforms like UNIX and Linux offer more security than Windows and the recent bad news for Microsoft is just yet more proof of that. Techrights keeps urging people to call out Windows because it is indeed part of the problem (ease of cracking) and despite Richard A. Clarke saying the truth (among other security folks whose opinion is similar, as our security category ought to show), there are persistent denials and gagging by Microsoft. Looking at the news over the weekend, there is an issue which was mentioned here before and is still being brought up, this time by The Register:

Many users remain infected with computer malware – despite the fact that the vast majority are running machines protected by anti-virus software.

A study by European Union statistics agency EUROSTAT found that one third of PC users (31 per cent) had the pox even though the vast majority (84 per cent) were running security software (anti-virus, anti-spam, firewall) on their PCs. Of the survey’s respondents, 3 per cent reported financial loss as a result of farming or phishing attacks, while a further 4 per cent reported privacy violations involving data sent online.

This reports neglects to name Windows. It’s embarrassing that Windows and Microsoft are conspicuously missing, which means that people may never learn. Also from the news, there is a lot of talk about “malware” with no attribution to Windows and Microsoft.

McAfee has identified the tools, techniques, and network activities used in these attacks, which continue on to this day. These attacks have involved an elaborate mix of hacking techniques including social engineering, spear-phishing, Windows exploits, Active Directory compromises, and the use of remote administration tools (RATs).

Here is another new example of someone reporting about Stuxnet and blaming those who take advantage of it, not those who left the holes.

Last night, a member of hacker group Anonymous – a devious 4chan-spawned Internet coalition known for increasingly serious web-based attacks – announced on Twitter that the group was in possession of the Stuxnet virus.

Stuxnet is a subject that we covered in the posts below. It is becoming very costly to many economies.

  1. Ralph Langner Says Windows Malware Possibly Designed to Derail Iran’s Nuclear Programme
  2. Windows Viruses Can be Politically Motivated Sometimes
  3. Who Needs Windows Back Doors When It’s So Insecure?
  4. Windows Insecurity Becomes a Political Issue
  5. Windows, Stuxnet, and Public Stoning
  6. Stuxnet Grows Beyond Siemens-Windows Infections
  7. Has BP Already Abandoned Windows?
  8. Reports: Apple to Charge for (Security) Updates
  9. Windows Viruses Can be Politically Motivated Sometimes
  10. New Flaw in Windows Facilitates More DDOS Attacks
  11. Siemens is Bad for Industry, Partly Due to Microsoft
  12. Microsoft Security Issues in The British Press, Vista and Vista 7 No Panacea
  13. Microsoft’s Negligence in Patching (Worst Amongst All Companies) to Blame for Stuxnet
  14. Microsoft Software: a Darwin Test for Incompetence
  15. Bad September for Microsoft Security, Symantec Buyout Rumours
  16. Microsoft Claims Credit for Failing in Security
  17. Many Windows Servers Being Abandoned; Minnesota Goes the Opposite Direction by Giving Microsoft Its Data
  18. Windows Users Still Under Attack From Stuxnet, Halo, and Zeus
  19. Security Propaganda From Microsoft: Villains Become Heroes
  20. Security Problems in iOS and Windows
  21. Eye on Security: BBC Propaganda, Rootkits, and Stuxnet in Iran’s Nuclear Facilities
  22. Eye on Security: ClamAV Says Windows is a Virus, Microsoft Compromises Mac OS X, and Stuxnet Runs Wild
  23. Windows Kernel Vulnerability for Thanksgiving, Insecurity Used for Surveillance Again
  24. Cablegate Reveals Government Requesting Access to Microsoft Data, Kill Switches
  25. Use Microsoft Windows, Get Assassinated
  26. Iran Shows the Downside of Using Proprietary Software
Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

5 Comments

  1. TemporalBeing said,

    February 14, 2011 at 4:26 pm

    Gravatar

    Perhaps the F/OSS market should take a lesson from Apple’s book – and simply stop calling F/OSS enabled systems PC’s, perhaps calling them Penguins, or Devils (NetBSD), or something else instead. Just a thought…

    Dr. Roy Schestowitz Reply:

    Some companies do this (Pogoplug, Zonbu, TomTom, etc.)

    You can’t prescribe one universal brand for a system that’s not proprietary… and that’s OK.

    twitter Reply:

    That won’t solve the problem which is that reporters don’t mention Windows when they should. Apple too suffers from the perception that all software is “equally bad.” Only reporters being honest about reporting the facts will fix this false perception.

    So why don’t reporters do this and what can be done about it? The first thing to do is to politely ask. Email when you can and find out. I’ve been told by one or two that they consider the OS to be tangential and unimportant. This is essentially the same thing as the second excuse, which is that they really don’t think OS matter and are openly bigoted in Microsoft’s favor. IDG people respond rudely, others do better. You would think that such a basic fact would be part of any article about Windows security problems but Microsoft has worked hard to influence prominent reporters. Give reporters a breath of fresh air, they like it.

    Successful letters are posed as a question, contain careful research about the specific problem and the general issue, and point out that it’s not fair to call Windows problems “computer problems”. Ask them why they called the Windows X a “computer X”. Tell them X is a Windows only problem with links to various security sites that mention W32, XP, Vista/Windows 7 and no others. Then tell them it’s not fair to condemn the entire computer industry because Microsoft can’t fix their stuff. You might also link to reliable estimates of Windows compromise and the costs. The unavoidable story is that only Microsoft has problems and that everyone using Windows is greatly inconvenienced, if not robbed.

  2. Mikko said,

    February 14, 2011 at 5:28 pm

    Gravatar

    just call it “Computer”

    Dr. Roy Schestowitz Reply:

    It’s like calling Toyota a “car” in relation to bad brakes.

    “It has been reported that cars had a defective braking system.”

DecorWhat Else is New


  1. Links 27/11/2021: Nvidia’s DLSS Hype and Why GNU/Linux Matters

    Links for the day



  2. [Meme] Linus Gabriel Sebastian Takes GNU/Linux for a (Tail)'Spin'

    If you’re trying to prove that GNU/Linux is NOT Windows, then “haha! Well done…”



  3. GNU/Linux is for Freedom and It'll Gain Many Users When (or Where) People Understand What Software (or Computing) Freedom Means

    Software that respects people's freedom (and by extension privacy as well) is an alluring proposition; those who choose to try GNU/Linux for the wrong reasons are likely the wrong target audience for advocates



  4. Amid Reports of Microsoft's Competition Crimes in Europe...

    European companies are complaining, but they seem to overlook the principal aspect of an imperialistic system with bottomless pockets (almost 30 trillion dollars in debt already; US national debt soared again last month); Microsoft is shielded by a political system with military (“defence”) as bailout budget to help cushion international expansion for data grab and technical leverage, as we've seen in the case of EPO (this is all political, not technical, and should thus be treated as a political/corruption issue)



  5. Is Linus Trolling the GNU/Linux Community?

    This new video responds to what many sites have been provoked into amplifying



  6. Links 27/11/2021: Tux Paint 0.9.27 and SeaMonkey 1.1.19 in EasyOS

    Links for the day



  7. [Meme] Keeping Our Distance From Microsoft

    The OSI is the dagger, the Linux Foundation is the knife, and many others are the sword by which Microsoft tries to get into the very heart of GNU/Linux and extinguish the Free software movement



  8. Microsoft Edge Encourages Indebted Americans to Guilt-spend Just in Time for Christmas

    Guest post by Ryan, reprinted with permission



  9. IRC Proceedings: Friday, November 26, 2021

    IRC logs for Friday, November 26, 2021



  10. 38+ Years of GNU and 19+ Years of FSF Associate Membership

    “On November 25, 2002,” Wikipedia notes, “the FSF launched the FSF Associate Membership program for individuals.” As the above video points out, it all started almost 40 years ago.



  11. Gemini as a Platform for Gamers

    Contrary to what people often assume (or are led to assume), even without client-side scripting Gemini can accomplish a great deal; early adopters, many of whom are technical, test the limits of the very minimalistic (by design and intention) specification



  12. Improved Workflows: Achievement Unlocked

    Today we've completed a bunch of small projects that can make us more efficient (e.g. more Daily Links per day, more articles); the above video was recorded many hours ago to accompany the outline below



  13. Links 26/11/2021: New Complaint About Microsoft Competition Crimes in Europe, EuroLinux 8.5, GhostBSD 21.11.24, and Kiwi TCMS 10.5 Released

    Links for the day



  14. Links 26/11/2021: F35 Elections, Whonix 16.0.3.7, OSMC's November Refresh With Kodi 19.3

    Links for the day



  15. IRC Proceedings: Thursday, November 25, 2021

    IRC logs for Thursday, November 25, 2021



  16. IRC Proceedings: Wednesday, November 24, 2021

    IRC logs for Wednesday, November 24, 2021



  17. Links 25/11/2021: PHP 8.1.0 Released and Linux 5.15.5

    Links for the day



  18. IBM as Master of Hypocrisy

    Free software projects and Free software developers have long been humiliated by corporations of Western misogynists, falsely claiming that the Free software community isn’t inclusive enough (these are shameless projection tactics; as a matter of public record, the exact opposite is true) and even the eradication of supposedly offensive language isn’t something IBM takes seriously



  19. Links 25/11/2021: LibreOffice 7.2.3 and Mesa 21.2.6 Released

    Links for the day



  20. [Meme] So Desperate That Edge Cannot Even Exceed 4% That They Block Rival Web Browsers

    Linux/Android/Free Software/GNU (they go by very many names/brands) may continue to grow to the point where Windows is as irrelevant as Blackberry; this means that Microsoft’s grip on the Web too has slipped — to the point where Microsoft frantically uses 'bailout' money to hijack LinkedIn, GitHub, etc. (it also rebrands almost everything as "Azure" or clown to fake a perception of growth)



  21. Windows Vista Service Pack 11 (Vista 11) Has Failed to Curb the Growth of GNU/Linux

    Windows market share continues to decrease in spite of billions of dollars spent bribing the media for fake hype, especially in light of a new Windows Service Pack (SP), Vista SP 11



  22. Links 25/11/2021: Proton 6.3-8 and Linux Mint Compared to Ubuntu

    Links for the day



  23. 3.5 Years Later the 'Master' of Fedora is Still Microsoft and IBM Cannot Be Bothered to Alter Git Branch Names (Refuting or Ignoring Its Very Own Directive About Supposedly Racially-Insensitive Terms)

    Today we demonstrate the hypocrisy of IBM; years after telling us that we should shun the term "master" and repeatedly insisting it had a racist connotation at least 65 Fedora repositories, still controlled by Microsoft, still use "master"



  24. Changing the Arrangement While News is a Bit Slow(er)

    I've made it easier for myself to keep abreast of things like IRC channels and networks (incidentally, a day ago Freenode reopened to anonymous logins) and I've improved monitoring of the Web sites, Gemini capsule etc. (this video is unplanned and improvised)



  25. Links 24/11/2021: Alpine Linux 3.15 and Endless OS 4.0 Released

    Links for the day



  26. [Meme] Jimmy Zemlin Loves Microsoft

    It’s funny, isn’t it? Lying for a living and sucking up to the liars pays off; you get to plunder actual Linux users while leaving Linux morally and financially bankrupt



  27. Links 24/11/2021: PHP Foundation and Flatpak Criticisms

    Links for the day



  28. IRC Proceedings: Tuesday, November 23, 2021

    IRC logs for Tuesday, November 23, 2021



  29. Links 24/11/2021: Rust Crisis and Team UPC Still Faking 'Progress'

    Links for the day



  30. Links 23/11/2021: New GNU Parallel and Memories of David H. Adler (Perl, Raku)

    Links for the day


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts