EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

09.26.13

Former Novell Staff Still Pushing the Linux Foundation Into Restricted Boot Territory, Ignoring the Real Threat (Back Doors)

Posted in GNU/Linux, Kernel, Novell, Security at 3:54 am by Dr. Roy Schestowitz

Greg Kroah-Hartman
Photo by Sebastian Oliva

Summary: Back doors in code, embedded in blobs, and even shoehorned into encryption is the overlooked security threat, which gets pushed aside in favour of phantom threats which Microsoft ‘sells’ through former Novell staff (i.e. funded by Microsoft)

A MONTH or two ago we mostly ignored exaggerated (sexed-up) reports about something called “Hand of Thief”. When there’s a Windows security threat the press does not call out Windows, but when it relates to GNU/Linux then tabloids like ZDNet scream from the rooftops. This thing called “Hand of Thief” is basically a malicious program which GNU/Linux users need to install themselves in order for it to do malicious things. It is not a virus, it does not spread, and it hardly even uses social engineering to get itself installed. We cited some reports which stress these facts and now comes a belated one too [1]. LynuxWorks is now offering some “Linux rootkit detector” [2] as if rootkits on GNU/Linux are a common issue. In a sense, since the Linux Foundation seems to insist on helping UEFI restricted boot, we are led to the belief that bootkits are a common threat to Linux. As the Linux Foundation’s site put it, as in the words of the employee it acquired from Novell:

Now that The Linux Foundation is a member of the UEFI.org group, I’ve been working on the procedures for how to boot a self-signed Linux kernel on a platform so that you do not have to rely on any external signing authority.

Greg K-H has been working on all sorts of other kernel-level projects that help Microsoft. He did this while being paid by Novell, which was in turn being given money by Microsoft. That’s the power of money. Other former Novell employees also helped promote UEFI restricted boot, as we showed before. Rogue influence by Novell in the Linux Foundation is a subject we have written about for half a decade, showing numerous examples.

The bigger security issue right now might be back doors, which might also exist in Linux, even in encryption form [3] (giving away passwords over the network for example), so hard-to-crack passwords [4] might not be enough. Microsoft’s and Sony’s network compromises sure reveal the massive financial effects of system intrusions, so this subject should not be taken lightly.

UEFI restricted boot is actually a security threat, not a security solution, especially when a signature is provided and managed by some rogue company in the United States — one which has been secretly in bed with the NSA. With UEFI restricted boot, hardware can be bricked remotely. In a way, UEFI restricted boot deserves the name “unsecure boot”. In some devices it can block the user from accessing his/her own computer. Nobody should promote such treacherous computing.

Related/contextual items from the news:

  1. Hand of Thief, Not

    Linux’s biggest vulnerability is the software that users install with full “superuser” privileges. If you just install applications from your distro’s official repository, that’s not a problem. But if you download software from dubious web sites, or if you add a mysterious repository to your package manager, you’re opening yourself up for an infection. Always, always make sure you know what software you are installing, why you are installing it, and where it’s from.

  2. Linux rootkit detector adds hardware punch to security scanning

    LynuxWorks is stepping up the battle with the release of the first hardware-based rootkit detection system powered by the LynxSecure separation kernel. Called the RDS5201, it combats and detects stealthy advanced persistent threats. Built on the LynxSecure 5.2 separation kernel and hypervisor, this small form factor appliance has been designed to offer a unique detection capability that complements traditional security mechanisms as they try to protect against the growing number and complexity of cyber threats.

  3. RSA warns developers not to use RSA products

    In today’s news of the weird, RSA (a division of EMC) has recommended that developers desist from using the (allegedly) ‘backdoored’ Dual_EC_DRBG random number generator — which happens to be the default in RSA’s BSafe cryptographic toolkit. Youch.

  4. How-to make hard-to-crack passwords you can easily remember
  5. Australian who boasted of hacking to plead not guilty to charges stemming from raid

    Dylan Wheeler, who claimed in February to have breached Microsoft’s and Sony’s networks, has not been charged with hacking

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. Links 20/6/2018: Qt 5.11.1, Oracle Solaris 11.3 SRU 33, HHVM 3.27.0, Microsoft Helping ICE

    Links for the day



  2. Patent Extremists Are Unable to Find Federal Circuit Cases That Help Them Mislead on Alice

    Patent extremists prefer talking about Mayo but not Alice when it comes to 35 U.S.C. § 101; Broadcom is meanwhile going on a 'fishing expedition', looking to profit from patents by calling for embargo through the ITC



  3. What Use Are 10 Million Patents That Are of Low Quality in a Patent Office Controlled by the Patent 'Industry'?

    The patent maximalists are celebrating overgranting; the USPTO, failing to heed the warning from patent courts, continues issuing far too many patents and a new paper from Mark Lemley and Robin Feldman offers a dose of sobering reality



  4. The Eastern District of Texas is Where Asian Companies/Patents/Trolls Still Go After TC Heartland

    Proxies of Longhorn IP and KAIST (Katana Silicon Technologies LLC and KAIST IP US LLC, respectively) roam Texas in pursuit of money of out nothing but patents and aggressive litigation; there's also a Microsoft connection



  5. EPO Insiders Correct the Record of Benoît Battistelli’s Tyranny and Abuse of Law: “Legal Harassment and Retaliation”

    Battistelli’s record, as per EPO-FLIER 37, is a lot worse than the Office cares to tell stakeholders, who are already complaining about decline in patent quality



  6. Articles About a Unitary Patent System Are Lies and Marketing From Law Firms With 'Lawsuits Lust'

    Team UPC has grown louder with its lobbying efforts this past week; the same lies are being repeated without much of a challenge and press ownership plays a role in that



  7. The Decline in Patent Quality at the EPO Causes Frivolous Lawsuits That Only Lawyers Profit From

    The European Patent Office (EPO) will continue granting low-quality European Patents under the leadership of the Battistelli-'nominated' Frenchman, António Campinos; this is bad news for science and technology as that quite likely means a lot more lawsuits without merit (which only lawyers profit from)



  8. What Battistelli's Workers Think of His Latest EPO Propaganda

    "Modernising the EPO" is what Battistelli calls a plethora of human rights abuses and corruption



  9. Links 19/6/2018: Total War: WARHAMMER II Confirmed for GNU/Linux, DragonFlyBSD 5.2.2 Released

    Links for the day



  10. More Media Reports About Decline in Quality of European Patents (Granted by the EPO)

    What the media is saying about the letter from Grünecker, Hoffmann Eitle, Maiwald and Vossius & Partner whilst EPO communications shift attention to shallow puff pieces about how wonderful Benoît Battistelli is



  11. Beware Team UPC's Biggest Two Lies About the Unitary Patent (UPC)

    Claims that a Unified Patent Court (UPC) will commence next year are nothing but a fantasy of the Liar in Chief, Benoît Battistelli, who keeps telling lies to French media (some of which he passes EPO money to, just like he passes EPO money to his other employer)



  12. Diversity at the EPO

    Two decades of EPO with 16-17 years under the control of French Presidents (and nowadays predominantly French management in general with Inventor Award held in France almost half the time) is "diversity at the EPO"



  13. Orrin Hatch, Sponsored the Most by the Pharmaceutical Industry, Tries to Make Its Patents Immune From Scrutiny (PTAB)

    Orrin Hatch is the latest example of laws being up for sale, i.e. companies can 'buy' politicians to act as their 'couriers' and pass laws for them, including laws pertaining to patents



  14. Links 17/6/2018: Linux 4.18 RC1 and Deepin 15.6 Released

    Links for the day



  15. To Keep the Patent System Alive and Going Practitioners Will Have to Accept Compromises on Scope Being Narrowed

    35 U.S.C. § 101 still squashes a lot of software patents, reducing confidence in US patents; the only way to correct this is to reduce patent filings and file fewer lawsuits, judging their merit in advance based on precedents from higher courts



  16. The Affairs of the USPTO Have Turned Into Somewhat of a Battle Against the Courts, Which Are Simply Applying the Law to Invalidate US Patents

    The struggle between law, public interest, and the Cult of Patents (which only ever celebrates more patents and lawsuits) as observed in the midst of recent events in the United States



  17. Patent Marketing Disguised as Patent 'Advice'

    The meta-industry which profits from patents and lawsuits claims that it's guiding us and pursuing innovation, but in reality its sole goal is enriching itself, even if that means holding science back



  18. Microsoft is Still 'Cybermobbing' Its Competition Using Patent Trolls Such as Finjan

    In the "cybersecurity" space, a sub-domain where many software patents have been granted by the US patent office, the patent extortion by Microsoft-connected trolls (and Microsoft's 'protection' racket) seems to carry on; but Microsoft continues to insist that it has changed its ways



  19. Links 16/6/2018: LiMux Story, Okta Openwashing and More

    Links for the day



  20. The EPO's Response to the Open Letter About Decline in Patent Quality as the Latest Example of Arrogance and Resistance to Facts, Truth

    Sidestepping the existential crisis of the EPO (running out of work and issuing many questionable patents with expectation of impending layoffs), the PR people at the Office choose a facts-denying, face-saving 'damage control' strategy while staff speaks out, wholeheartedly agreeing with concerned stakeholders



  21. In the United States the Patent Trial and Appeal Board, Which Assures Patent Quality, is Still Being Smeared by Law Firms That Profit From Patent Maximalism, Lawsuits

    Auditory roles which help ascertain high quality of patents (or invalidate low-quality patents, at least those pointed out by petitions) are being smeared, demonised as "death squads" and worked around using dirty tricks that are widely described as "scams"



  22. The 'Artificial Intelligence' (AI) Hype, Propped Up by Events of the European Patent Office (EPO), is Infectious and It Threatens Patent Quality Worldwide

    Having spread surrogate terms like “4IR” (somewhat of a 'mask' for software patents, by the EPO's own admission in the Gazette), the EPO continues with several more terms like “ICT” and now we’re grappling with terms like “AI”, which the media endlessly perpetuates these days (in relation to patents it de facto means little more than "clever algorithms")



  23. Links 15/6/2018: HP Chromebook X2 With GNU/Linux Software, Apple Admits and Closes a Back Door ('Loophole')

    Links for the day



  24. The '4iP Council' is a Megaphone of Team UPC and Team Battistelli at the EPO

    The EPO keeps demonstrating lack of interest in genuine patent quality (it uses buzzwords to compensate for deviation from the EPC and replaces humans with shoddy translators); it is being aided by law firms which work for patent trolls and think tanks that propel their interests



  25. Grünecker, Hoffmann Eitle, Maiwald and Vossius & Partner Find the Courage to Express Concerns About Battistelli's Ugly Legacy and Low Patent Quality

    The astounding levels of abuse at the EPO have caused some of the EPO's biggest stakeholders to speak out and lash out, condemning the Office for mismanagement amongst other things



  26. IAM Concludes Its Latest Anti-§ 101 Think Tank, Featuring Crooked Benoît Battistelli

    The attack on 35 U.S.C. § 101, which invalidates most if not all software patents, as seen through the lens of a Battistelli- and Iancu-led lobbying event (set up by IAM)



  27. Google Gets Told Off -- Even by the Typically Supportive EFF and TechDirt -- Over Patenting of Software

    The EFF's Daniel Nazer, as well as TechDirt's founder Mike Masnick, won't tolerate Google's misuse of Jarek Duda's work; the USPTO should generally reject all applications for software patents -- something which a former Commissioner for Patents at the USPTO seems to be accepting now (that such patents have no potency after Alice)



  28. From the Eastern District of Texas to Delaware, US Patent Litigation is (Overall) Still Declining

    Patent disputes/conflicts are increasingly being settled outside the courts and patents that aren't really potent/eligible are being eliminated or never brought forth at all



  29. Links 13/6/2018: Cockpit 170, Plasma 5.13, Krita 4.0.4

    Links for the day



  30. When the USPTO Grants Patents in Defiance of 35 U.S.C. § 101 the Courts Will Eventually Squash These Anyway

    Software/abstract patents, as per § 101 (Section 101) which relates to Alice Corp v CLS Bank at the US Supreme Court, are not valid in the United States, albeit one typically has to pay a fortune for a court battle to show it because the patent office (USPTO) is still far too lenient and careless


CoPilotCo

RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

CoPilotCo

Recent Posts