EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

09.26.13

Former Novell Staff Still Pushing the Linux Foundation Into Restricted Boot Territory, Ignoring the Real Threat (Back Doors)

Posted in GNU/Linux, Kernel, Novell, Security at 3:54 am by Dr. Roy Schestowitz

Greg Kroah-Hartman
Photo by Sebastian Oliva

Summary: Back doors in code, embedded in blobs, and even shoehorned into encryption is the overlooked security threat, which gets pushed aside in favour of phantom threats which Microsoft ‘sells’ through former Novell staff (i.e. funded by Microsoft)

A MONTH or two ago we mostly ignored exaggerated (sexed-up) reports about something called “Hand of Thief”. When there’s a Windows security threat the press does not call out Windows, but when it relates to GNU/Linux then tabloids like ZDNet scream from the rooftops. This thing called “Hand of Thief” is basically a malicious program which GNU/Linux users need to install themselves in order for it to do malicious things. It is not a virus, it does not spread, and it hardly even uses social engineering to get itself installed. We cited some reports which stress these facts and now comes a belated one too [1]. LynuxWorks is now offering some “Linux rootkit detector” [2] as if rootkits on GNU/Linux are a common issue. In a sense, since the Linux Foundation seems to insist on helping UEFI restricted boot, we are led to the belief that bootkits are a common threat to Linux. As the Linux Foundation’s site put it, as in the words of the employee it acquired from Novell:

Now that The Linux Foundation is a member of the UEFI.org group, I’ve been working on the procedures for how to boot a self-signed Linux kernel on a platform so that you do not have to rely on any external signing authority.

Greg K-H has been working on all sorts of other kernel-level projects that help Microsoft. He did this while being paid by Novell, which was in turn being given money by Microsoft. That’s the power of money. Other former Novell employees also helped promote UEFI restricted boot, as we showed before. Rogue influence by Novell in the Linux Foundation is a subject we have written about for half a decade, showing numerous examples.

The bigger security issue right now might be back doors, which might also exist in Linux, even in encryption form [3] (giving away passwords over the network for example), so hard-to-crack passwords [4] might not be enough. Microsoft’s and Sony’s network compromises sure reveal the massive financial effects of system intrusions, so this subject should not be taken lightly.

UEFI restricted boot is actually a security threat, not a security solution, especially when a signature is provided and managed by some rogue company in the United States — one which has been secretly in bed with the NSA. With UEFI restricted boot, hardware can be bricked remotely. In a way, UEFI restricted boot deserves the name “unsecure boot”. In some devices it can block the user from accessing his/her own computer. Nobody should promote such treacherous computing.

Related/contextual items from the news:

  1. Hand of Thief, Not

    Linux’s biggest vulnerability is the software that users install with full “superuser” privileges. If you just install applications from your distro’s official repository, that’s not a problem. But if you download software from dubious web sites, or if you add a mysterious repository to your package manager, you’re opening yourself up for an infection. Always, always make sure you know what software you are installing, why you are installing it, and where it’s from.

  2. Linux rootkit detector adds hardware punch to security scanning

    LynuxWorks is stepping up the battle with the release of the first hardware-based rootkit detection system powered by the LynxSecure separation kernel. Called the RDS5201, it combats and detects stealthy advanced persistent threats. Built on the LynxSecure 5.2 separation kernel and hypervisor, this small form factor appliance has been designed to offer a unique detection capability that complements traditional security mechanisms as they try to protect against the growing number and complexity of cyber threats.

  3. RSA warns developers not to use RSA products

    In today’s news of the weird, RSA (a division of EMC) has recommended that developers desist from using the (allegedly) ‘backdoored’ Dual_EC_DRBG random number generator — which happens to be the default in RSA’s BSafe cryptographic toolkit. Youch.

  4. How-to make hard-to-crack passwords you can easily remember
  5. Australian who boasted of hacking to plead not guilty to charges stemming from raid

    Dylan Wheeler, who claimed in February to have breached Microsoft’s and Sony’s networks, has not been charged with hacking

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. Leaked: Meeting in Secret, Jesper Kongstad-Led Council Decides EPO Judge is Guilty Until Proven Innocent

    This EPO document, which came out earlier today, includes brief news on the suspended DG3 member (a judge whom Battistelli does not like); it’s not exactly encouraging as it’s not apparent that the situation will be resolved any time soon (before end of tenure)



  2. Deconstructing the Latest 'Damage Control' From Team UPC Amid Demise of Unitary Patent Pipe Dreams

    A breakdown of responses to Britain's exit from the EU (as per Article 50), with its mortal impact on the Unified Patent Court that was long envisioned and lobbied for by the patent microcosm



  3. As Expected, Photo Op and Battistelli Lies Have Just Come Out, Hilariously Claiming “Higher Quality Patent Procedures”

    A short time after Techrights covered the meeting in which Battistelli would likely attempt to co-opt Lee for legitimisation the EPO does exactly what we predicted it would do



  4. Oral Arguments in the US Supreme Court (SCOTUS) Suggest That the TC Heartland Case Will Likely Crush the Eastern District of Texas, Presently Infested With Patent Trolls

    Courts of the Eastern District of Texas (EDTX or East Texas for short) might soon have to fold or resize, and the local economy adapt to accommodate something other than patent trolls and aggressors, based on words (questions) heard at the highest courtroom in the United States



  5. Devaluation of European Patents is a Recipe for Institutional Suicide and Immeasurable Harm to Europe's Economy

    The horrible vision and the enormous cost (not just to the European Patent Office) that Battistelli's policies will have on an entire continent explained in light of the situation in China, where the biggest patent bubble in human history is currently taking shape



  6. EPO is a Laughing Stock in International Media This Week (Quality of Patents) After Decades-Long Reputation Building

    The reputation of European Patents (EPs) is quickly going down the drain, as Battistelli defies the law and the very fundamental principles of patenting



  7. Director Michelle Lee Across the Table From EPO 'Mafioso' Benoît Battistelli

    Battistelli leaves the comfort of his secret penthouse (paid for by EPO budget) and apparently goes to America where things have been improving, unlike the EPO



  8. Links 30/3/2017: Vivaldi 1.8, GNOME 3.26 Release Schedule

    Links for the day



  9. Recognising the Death of Software Patents, Microsoft's Largest Ally in India Belatedly Joins the Linux-Centric Open Invention Network

    With the demise of software patents come some interesting new developments, including the decision at Infosys — historically very close to Microsoft and a proponent of software patents — to join the Open Invention Network (OIN)



  10. LG Not Only Suing Rivals Using Patents But is Also Passing Patents for Trolls Like Sentegra to Sue

    LG gives yet more reasons for a boycott, having just leveraged not just patents but also patent trolls in a battle against a competitor



  11. March 29th: The Day the Unitary Patent (UPC) Died

    Stating the obvious and proving us right amid Article 50 débâcle



  12. Kongstad and Battistelli Have Staged a Coup at the European Patent Organisation (EPO)

    Discussion about Battistelli and his chinchilla denying national representatives their rights and power to oust Battistelli, who is rapidly destroying not just the Office but also the whole Organisation, Europe's reputation, and the image of France



  13. Europe as the World's Laughing Stock When it Comes to Patent Quality/Scope and the Coming Appeals

    Criticism and embarrassing coverage for the EPO, which has just decided to grant patents even on genome, in defiance of a lot of things



  14. Links 29/3/2017: End of Linux Action Show, Top NSA Partner Pays Linux Foundation

    Links for the day



  15. In Attempt to Promote the Horrific UPC (Poor Quality of Patents Everywhere), Minnoye and Casado Cerviño Attack Their Own Staff for Saying the Truth

    An attack on truth itself -- the disintegration of the European Patent Office (EPO) -- carries on, after staff found the courage to tell delegates what had happened due to Battistelli's policies and incredible oppression that prevails and expands



  16. Another Likely Casualty of the Battistelli Regime at the EPO: Validity of Decisions of Terrified Boards of Appeal Judges

    Under pressure and habitual intervention from a demoralising, overreaching, and out-of-control President (from an entirely different division), examiners and judges 'normalise' the practice of granting patents on genetics -- a very slippery slope in terms of patent scope



  17. Benoît Battistelli 'Pulls an Erdoğan' Faster Than Erdoğan

    An explanation of what the imminent departure of Minnoye (this summer) will mean for Benoît Battistelli and his confidants, who now resemble some of the world's most ruthless dictatorships



  18. With Important Supreme Court Decisions Looming, Mainstream Media Tackles Patent Trolls

    The US Supreme Court (SCOTUS) will soon rule on TC Heartland and Lexmark, potentially restricting abusive patent behaviour even further (making room for freedom to innovate and for competition)



  19. IAM Magazine is Very Blatantly Promoting Patent Trolls and Their Agenda

    IAM Media, which produces a magazine every now and then while posting online every day, maintains its pro-trolls agenda, which is becoming so clear to see that it is definitely worth documenting yet again



  20. A “Perfect Recipe for Fraud” at the European Patent Office (EPO)

    How the world's leading patent office became a world-leading source of abuse, corruption, nepotism, injustice, incompetence, censorship, alleged bribery, pure deception, distortion of media, defamation, and suicides (among many other things)



  21. Techrights Was Right About the Unitary Patent (UPC)

    No Unified Patent Court in the UK and probably nothing like it in the rest of Europe any time soon (if ever)



  22. Patents on Life and Patents on Software Serve to Show That EPO Patent Quality Fell Well Behind the US (PTO)

    Anything goes at the EPO, except dissent; any patent application seems to be grantable, provided one uses simple tricks and persists against overworked examiners who are pressured to increase so-called 'production'



  23. Links 28/3/2017: Linux 4.11-rc4 Kernel Released, Red Hat Surge on Sales

    Links for the day



  24. The Crook Goes to Brussels to Lie About the Unitary Patent (UPC)

    The person who spent years lying about the UPC and severely attacking critics (usually by blatantly lying about them) goes to Brussels for another nose extension



  25. The EPO's HR Roadmap Retrospective

    A look back at the terrible ‘accomplishments’ of the Jesper Kongstad-led Administrative Council, which still issues hogwash and face-saving lies, as one might expect from a protector of Battistelli that lies to national representatives and buries inconvenient topics



  26. Links 26/3/2017: Debian Project Leader Elections, SecureDrop and Alexandre Oliva FSF Winners

    Links for the day



  27. His Master's Voice, Jesper Kongstad, Blocks Discussion of Investigative and Disciplinary Procedures at the EPO

    The Chairman of the Administrative Council of the European Patent Organisation is actively preventing not just the dismissal of Battistelli but also discussion of Battistelli's abuses



  28. Heiko Maas and the State of Germany Viewed as Increasingly Complicit in EPO Scandals and Toxic UPC Agenda

    It is becoming hard if not impossible to interpret silence and inaction from Maas as a form of endorsement for everything the EPO has been doing, with the German delegates displaying more of that apathy which in itself constitutes a form of complicity



  29. With IP Kat Coverage of EPO Scandals Coming to an End (Officially), Techrights and The Register Remain to Cover New Developments

    One final post about the end of Merpel’s EPO coverage, which is unfortunate but understandable given the EPO’s track record attacking the media, including blogs like IP Kat, sites of patent stakeholders, and even so-called media partners



  30. Everyone, Including Patent Law Firms, Will Suffer From the Demise of the EPO

    Concerns about quality of patents granted by the EPO (EPs) are publicly raised by industry/EPO insiders, albeit in an anonymous fashion


CoPilotCo

RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

CoPilotCo

Recent Posts