10.12.12

Gemini version available ♊︎

Microsoft Breaks the Web and Linux

Posted in GNU/Linux, Kernel, Microsoft at 12:45 pm by Dr. Roy Schestowitz

Coffee time

Summary: How Microsoft uses ‘security’ to exclude Web sites and GNU Linux distributions

Microsoft does not comply with the Web. It does not adhere to standards, either. It rejects fine keys and prominent Web folks complain about it.

One writer explains that “[a]s of Oct. 9, 2012, longer key lengths are mandatory for all digital encryption certificates that touch Windows systems.

“That must make Microsoft some new foes.”“This means that Internet Explorer will refuse to access websites that do not have RSA keys with minimum lengths of 1024 bits. You won’t be able to exchange encrypted emails, run ActiveX controls or install applications on Windows. This isn’t new, as Microsoft started making announcements about this well over a year ago.”

Then there is this about Microsoft blocking Flash based on a private whitelist: “Yeah you read that right. I just received an interesting email from Brightcove (the video delivery guys) about issues with their Flash based solution and Windows 8 running the new Internet Explorer 10.”

That must make Microsoft some new foes.

These things are actually less malicious than plugging proprietary software hooks into Linux to discourage use of Free and open source virtualisation even in GNU/Linux, not to mention UEFI, which Debian agrees is a very malicious move (there is no solution to it yet). Microsoft is knowingly complicating the process of installing GNU/Linux and ways exist for spinning it as benign or beneficial.

James Bottomley, who used to work on some Microsoft stuff on behalf of his former employer Novell (e.g. on Hyper-V), speaks of a new workaround that bloggers try to grasp.

Pogson states correctly that this should not be legal. Stallman agrees. To quote Pogson: “I don’t like any solution that depends on M$. If they can revoke that key, GNU/Linux falls down. They have messed up keys before either deliberately or through incompetence. Someone should sue M$ over this mess. It’s clearly anti-competitive. Also, this doesn’t look like a solution for servers.”

Why should anyone be asking Microsoft for permission to use a computer which does not even have Windows?

“Pogson states correctly that this should not be legal.”News about it sometimes misses the point, but Varghese writes: “Fifteen days from today, Windows 8 will go on sale; only hardware that is certified to work with this system will be able to boot it, with signed keys being used to determine whether a genuine system is being booted.

“This will put those who boot other operating systems at a disadvantage. Given this, the Linux Foundation has come up with a means of bypassing secure boot to enable users of open source operating systems to continue to boot on hardware certified for Windows 8.”

He later criticises this, as he did several times in the past. It is an important issue that even conferences cover. Here is what one UEFI apologist wrote: “The plan for supporting UEFI Secure Boot in Fedora is still pretty much as originally planned, but it’s dependent upon building a binary which has the Fedora key embedded, and then getting that binary signed by Microsoft. Easy enough for us to do, but not necessarily practical for smaller distributions. There’s a few possible solutions for them.”

Techrights‘ position on this is that UEFI is anticompetitive and antitrust should therefore be pursued. Let is all remind us that there is no reformed Microsoft, it is still the same unethical corporation.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

DecorWhat Else is New


  1. Links 21/05/2022: Security Blunders and Microsoft Posturing

    Links for the day



  2. Links 21/05/2022: GitLab at Fedora and Pipewire in Next Ubuntu

    Links for the day



  3. Links 21/05/2022: HP Teams up with System76

    Links for the day



  4. IRC Proceedings: Friday, May 20, 2022

    IRC logs for Friday, May 20, 2022



  5. Links 20/05/2022: Thunderbird Revenue Rising

    Links for the day



  6. Outsourcing Sites to Social Control Media is an Outdated Mindset in 2022

    Centralised or federated censorship/filtering platforms (also known as "social [control] media" [sic]) aren't the way forward; we're therefore a little surprised that Linux Weekly News (LWN) bothers with that languishing bandwagon all of a sudden



  7. Links 20/05/2022: Plasma's Latest Beta in Kubuntu 22.04, Kapow 1.6.0 Released

    Links for the day



  8. Turkey's Migration to Pardus Linux and LibreOffice Explained 2 Months Ago in LibrePlanet

    This talk by Hüseyin GÜÇ was uploaded under the title “Real world GNU/Linux story from Istanbul”



  9. In Turkey, Windows Market Share is Down to Almost Nothing, 'Linux' is About Two Thirds of the Connected Devices

    Watch this graph of Windows going down from around 99.5% to just 11.55% this month



  10. The Lies and Delusions of António Campinos

    Monopolies and American corporations (and their lawyers) are a priority for today's EPO, Europe's second-largest institution



  11. Links 20/05/2022: Fedora BIOS Boot SIG

    Links for the day



  12. Links 20/05/2022: Oracle Linux 8.6 and VMware Security Crisis

    Links for the day



  13. IRC Proceedings: Thursday, May 19, 2022

    IRC logs for Thursday, May 19, 2022



  14. Links 19/05/2022: Rust 1.61.0 and Lots of Security FUD

    Links for the day



  15. EPO Eating Its Own (and Robbing Its Own)

    António Campinos is lying to his staff and losing his temper when challenged about it; Like Benoît Battistelli, who ‘fixed’ this job for his banker buddy (despite a clear lack of qualifications and relevant experience), he’s just robbing the EPO’s staff (even pensioners!) and scrubbing the EPC for ill-gotten money, which is in turn illegally funneled into financialization schemes



  16. [Meme] EPO Budget Tanking?

    While the EPO‘s António Campinos incites people (and politicians) to break the law he’s also attacking, robbing, and lying to his own staff; thankfully, his staff isn’t gullible enough and some MEPs are sympathetic; soon to follow is a video and publication about the EPO’s systematic plunder (ETA midnight GMT)



  17. EPO.org (Official EPO Site) Continues to Promote Illegal Agenda and Exploit Ukraine for PR Stunts That Help Unaccountable Crooks

    epo.org has been turned into a non-stop propaganda machine of Benoît Battistelli and António Campinos because the EPO routinely breaks the law; it’s rather tasteless that while Ukrainians are dying the EPO’s mob exploits Ukraine for PR purposes



  18. [Meme] EPO Applicants Unwittingly Fund the War on Ukraine

    As we’ve just shown, António Campinos is desperately trying to hide a massive EPO scandal



  19. EPO Virtue-Signalling on the Ukrainian Front

    António Campinos persists in attention-shifting dross and photo ops; none of that can change the verifiable facts about the EPO’s connections to Lukashenko’s 'science park' in Minsk



  20. Links 19/05/2022: PostgreSQL 15 Beta 1 and Plasma 5.25 Beta

    Links for the day



  21. A Libera.Chat Anniversary and Happy Birthday (Maybe the Last) to 'Leenode'

    What became known as the so-called ‘Leenode’ is a cautionary tale, but maybe it is also a blessing in disguise because IRC as a whole seem to have become a lot more decentralised (as everything should be)



  22. Links 19/05/2022: The Gradual Fall of Netflix/DRM

    Links for the day



  23. IRC Proceedings: Wednesday, May 18, 2022

    IRC logs for Wednesday, May 18, 2022



  24. Links 18/05/2022: Qt Company Loses Chief; OpenSUSE Leap Micro 5.2 and RHEL 9 Final

    Links for the day



  25. Jim Zemlin's Wife is Funded by Puppies (Microsoft)

    Jim Zemlin — like his wife — is bagging millions from Microsoft, but that’s clearly a conflict of interest for the Linux Foundation



  26. Links 18/05/2022: More Defections From WordPress to Gemini

    Links for the day



  27. Links 18/05/2022: PikaScript and cURL's Annual User Survey

    Links for the day



  28. IRC Proceedings: Tuesday, May 17, 2022

    IRC logs for Tuesday, May 17, 2022



  29. Phoronix: Microsoft and Phoronix Sponsor (and Close Microsoft Partner) AMD All Over the Place

    When you’re taking massive 'gifts' from AMD (and also some from Microsoft) maybe it’s not surprising that editorial decisions change somewhat…



  30. EPO Has No F-ing Oversight

    Earlier today SUEPO mentioned this new article demonstrating that EPO President António Campinos can very obviously and blatantly violate the Code of Conduct of the Office without facing any consequences; there are translations too, so the report is now available in four languages


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts