EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

04.02.14

Red Hat Should Keep Its Distance From NSA Facilitator Microsoft

Posted in Microsoft, Red Hat, Security, Windows at 6:27 am by Dr. Roy Schestowitz

Dragonfly

Summary: Criticism of Red Hat’s increasing proximity to some of the very same bits of proprietary software which are accompanied by back doors (for the NSA)

THE DANGERS of Microsoft are very real, as a former foe of Microsoft, Novell, helped prove. Five years ago Red Hat consented to playing an active part in Microsoft VM hosts, despite knowing (even back then) about Microsoft’s relationship with the NSA, which meant that VMs running RHEL would be accessible (to the NSA) from the back door, Microsoft Windows.

There are many back doors in Windows and therefore in Hyper-V, which sits on top of Windows (back doors further down the stack). Microsoft tells the NSA about these back doors. To give the latest example of back doors, see this new report [2] which says: “Nearly 30 days after reports of a zero-day flaw being exploited in the wild, Microsoft will finally patch this critical vulnerability.”

Relying on Microsoft for technology means that one should also expect and accept back doors. A reader showed us this new article, claiming that “Mono [is] infecting Android,” but it’s not just Android. Even Red Hat is now making such mistakes, in addition to hiring from Microsoft for management of virtualisation. Based on [2,3], Red Hat now accommodates Microsoft .NET applications, despite them being proprietary and potential back doors. A week or so ago some speculated that Microsoft might buy Red Hat (one day) [4,5] and yesterday we found the article “Why Microsoft Will Pick Off Red Hat” (logic of investors, not technical people).

Microsoft is now knowingly abandoning hundreds of millions of Windows users, leaving them with permanent back doors [6,7], so why should Red Hat trust Microsoft .NET applications or anything that comes from Microsoft, including Hyper-V? Articles like [8-10] remind us that in GNU/Linux the main flaw is human error (not changing default passwords or not applying patches, which Red Hat is making easier to apply without any downtime [11]).

The bottom line is, Red Hat’s relationship with the NSA withstanding, it oughtn’t connect too much to Microsoft components like .NET and Hyper-V because these constitute back doors that jeopardise security of GNU/Linux users.

Related/contextual items from the news:

  1. Microsoft to Fix an Internet Explorer Zero-Day Flaw
  2. Red Hat Adds Microsoft .NET to Its OpenShift PaaS
  3. A Red Hat stunner: ‘Miccosoft .NET apps on OpenShift’ Yes, you read correctly

    On Wednesday, Working with Uhuru Software, Red Hat is now incorporate a rival Microsoft product – .NET – to its three-year-old OpenShift platform-as-a-service. Really? Red Hat even published a blog to explain what’s going on to those who might find the concept a bit unbelievable.

    Chris Morgan, the OpenShift Partner Ecosystem Technical Director for Red Hat, wrote the blog – and even he acknowledged the incredulity of it all that something from Microsoft, which for years has been an enemy of Red Hat, Linux and Open Source, would be incorporated into OpenShift.

  4. An Indecent Proposal: Microsoft and Red Hat?
  5. Reviews, Indecent Proposal, and Ubuntu Graduation

    Today brings two new reviews. Jesse Smith reviews Linux Mint Debian Edition 201403 in today’s Distrowatch Weekly and Jamie Watson posts his latest hands-on. Steven J. Vaughan-Nichols says folks don’t care about operating systems anymore. Matt Hartley has a few suggestions for those ready to graduate from Ubuntu. All this and more in tonight’s Linux news review.

    Jesse Smith tested the latest LMDE in this week’s Distrowatch Weekly. He found a few bugs but Smith says it “lives up to its description” of having “rough edges.” With all its “nasty surprises” Smith suggests folks just stick with the Ubuntu-based version of Mint. But see his full review for all the details.

  6. Perspective: Microsoft risks security reputation ruin by retiring XP

    A decade ago, Microsoft kicked off SDL, or Security Development Lifecycle, a now-widely-adopted process designed to bake security into software, and began building what has become an unmatched reputation in how a vendor writes more secure code, keeps customers informed about security issues, and backs that up with regular patches.

  7. Positive Feedback: M$ Uses XP To Publish The Insecurity Of Using That Other OS
  8. Flaws In People And Their Software
  9. Red Hat Risk Reflex (The Linux Security Flaw That Isn’t)

    News headlines screaming that yet another Microsoft Windows vulnerability has been discovered, is in the wild or has just been patched are two a penny. Such has it ever been. News headlines declaring that a ‘major security problem’ has been found with Linux are a different kettle of fish. So when reports of an attack that could circumvent verification of X.509 security certificates, and by so doing bypass both secure sockets layer (SSL) and Transport Layer Security (TLS) website protection, people sat up and took notice. Warnings have appeared that recount how the vulnerability can impact upon Debian, Red Hat and Ubuntu distributions. Red Hat itself issued an advisory warning that “GnuTLS did not correctly handle certain errors that could occur during the verification of an X.509 certificate, causing it to incorrectly report a successful verification… An attacker could use this flaw to create a specially crafted certificate that could be accepted by GnuTLS as valid.” In all, at least 200 operating systems actually use GnuTLS when it comes to implementing SSL and TLS and the knock-on effect could mean that web applications and email alike are vulnerable to attack. And it’s all Linux’s fault. Or is it?

  10. Linux Bugs, Bugs Everywhere

    “We are seeing a lot of crypto bugs surfacing lately because these libraries are suddenly getting a lot of review thanks to Snowden’s revelations,” suggested blogger Chris Traver. “I think one has to separate the crypto bugs from others because they are occurring in a different context. “From what I have read about gnutls, though, it seems to me that this is probably the tip of the iceberg.”

  11. Introducing kpatch: Dynamic Kernel Patching

    In upstream development news, the kernel team here at Red Hat has been working on a dynamic kernel patching project called kpatch for several months. At long last, the project has reached a point where we feel it’s ready for a wider audience and are very excited to announce that we’ve released the kpatch code under GPLv2.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Reddit
  • co.mments
  • DZone
  • email
  • Google Bookmarks
  • LinkedIn
  • NewsVine
  • Print
  • Technorati
  • TwitThis
  • Facebook

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. Links 22/11/2019: Mesa 19.2.6, webOS OSE 2.1.0

    Links for the day



  2. Understanding Thierry Breton: More Influential Friends in High Places

    "So it comes as no surprise to find Valerie and Thierry rubbing shoulders with members of the Rothschild family at social events."



  3. Links 22/11/2019: Slimbook’s GNU/Linux Laptops, Kubernetes Hype

    Links for the day



  4. Techrights is Still a Team Effort

    Getting involved in what we do is not difficult and it is even encouraged



  5. Guest Post/Off-Topic: Koalas Caught in Australian Bushfire

    Australian volunteers and rescuers need help to rescue helpless animals facing danger



  6. Global Patent Warming

    The old term "Global Patent Warming" comes to mind when one assesses the neoliberal approach of today's EPO, where the sole goal is making piles of money by granting loads and loads of illegal European Patents



  7. IRC Proceedings: Thursday, November 21, 2019

    IRC logs for Thursday, November 21, 2019



  8. Teaser: “Enriching Exchanges”

    Ahead of the fourteenth part in the Breton series this old tweet seems increasingly relevant



  9. Web Site Which Exposed Microsoft Crimes is Gone From the Web, But Copies Still Exist

    Reputation laundering operations of Microsoft tell us that Microsoft is a 'new' and 'reformed' company; but Comes v Microsoft documents serve to show that little has changed



  10. Understanding Thierry Breton: Socialising With the Elite

    "Bernadette Chirac is not the only Presidential widow with whom Valerie has close connections."



  11. Justice Peter Huber Speaking to a Front Group of Team UPC May Compromise the Integrity of the FCC and Its Outcomes

    The public reaction, even from some legal professionals, isn't too positive, seeing how judges from BVerfG (FCC) speak to the mouthpieces of Team UPC (biased and in the pockets of the litigation 'industry')



  12. Injustice at Every Level Would Simply Doom the Entire Patent System

    Repeated failure to restore the Rule of Law and enforce accountability/oversight in Europe's patent system renders the entire system moot; it is a case of adherence to basic constitutional pillars



  13. Understanding Thierry Breton: Thierry and the $100 Billion Man

    Thierry Breton's connections to the tax avoidance ploy of his friend Bernard Arnault



  14. Links 21/11/2019: Mesa 19.3.0 RC4, Canonical SPS

    Links for the day



  15. Links 21/11/2019: Charmed OSM, Mesa 19.2.5, DXVK 1.4.5, Zorin OS 15 Lite

    Links for the day



  16. Understanding Thierry Breton: Atos Healthcare - “The Ugly Face of Business”

    "...2,380 people died after their claim for employment and support allowance (ESA) ended because a work capability assessment (WCA) found that they were found fit for work."



  17. IRC Proceedings: Wednesday, November 20, 2019

    IRC logs for Wednesday, November 20, 2019



  18. Microsoft Tim: Microsoft is Now Defending Linux

    The difference between fiction and reality



  19. Justice Peter Huber of the German Federal Constitutional Court (FCC) Calls 'Bullshit' a Rumour Nobody Really Spreads

    A sort of 'trial by media' (by Team UPC) compromises the integrity of the case (constitutional complaint) and can be interpreted as judges succumbing to lobbying/pressure from those who conspire to violate many constitutions across Europe for personal/financial gain



  20. Understanding Thierry Breton: What Thierry Did Next...

    "Whether by coincidence or not, when Atos announced in 2010 that it would acquire Siemens’ IT unit, it was the 32-year-old Macron at Rothschild who advised Breton on the deal."



  21. Links 20/11/2019: HONOR MagicBook With GNU/Linux, Coreboot 4.11, GNU Health Patchset 3.6.1

    Links for the day



  22. IRC Proceedings: Tuesday, November 19, 2019

    IRC logs for Tuesday, November 19, 2019



  23. EPO Geared Towards Financial Exploitation of Europe Instead of Serving Europe

    For the financial benefit of law firms and patent offices (they profit from processing loads of patents and lawsuits) Europe is being reverted back to Medieval Times when exercising invention and free thought (or free coding) was a luxury of the rich alone



  24. Microsoft and IBM Are the Patent Trolls, They Won't Protect Us From Trolls

    "Microsoft has no taste" and IBM has no taste, either; they're lying to our collective face together with OIN and the 'Linux' Foundation



  25. How Ralph Nader Put It

    Ralph Nader on money in politics



  26. ZDNet (CBS) Associates GNU/Linux Users With ISIS

    Response to "US student was allegedly building a custom Gentoo Linux distro for ISIS," just published by ZDNet and composed by their biggest troll, Catalin Cimpanu



  27. Understanding Thierry Breton: Noël Forgeard and His “Golden Parachute”

    The end of the first half of the Breton series; in this particular part we continue to cover the EADS scandal and the second half of this series will include the EPO connections (the vote in a plenary for Breton's nomination is due 27/11)



  28. Links 19/11/2019: Zswap's B-Tree Search Implementation, WordPress 5.2.4

    Links for the day



  29. We've Already Entered the Era When Patents Should be Presumed Invalid

    The abundance of low-quality patents may mean short-term profits for patent offices and law firms; but we know at whose expense they are profiting and the legitimacy of patent systems suffers as a result



  30. Jean-Luc Breton

    Breton a champion of obstruction and obfuscation


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts