EditorsAbout the SiteComes vs. MicrosoftUsing This Web SiteSite ArchivesCredibility IndexOOXMLOpenDocumentPatentsNovellNews DigestSite NewsRSS

04.02.14

Red Hat Should Keep Its Distance From NSA Facilitator Microsoft

Posted in Microsoft, Red Hat, Security, Windows at 6:27 am by Dr. Roy Schestowitz

Dragonfly

Summary: Criticism of Red Hat’s increasing proximity to some of the very same bits of proprietary software which are accompanied by back doors (for the NSA)

THE DANGERS of Microsoft are very real, as a former foe of Microsoft, Novell, helped prove. Five years ago Red Hat consented to playing an active part in Microsoft VM hosts, despite knowing (even back then) about Microsoft’s relationship with the NSA, which meant that VMs running RHEL would be accessible (to the NSA) from the back door, Microsoft Windows.

There are many back doors in Windows and therefore in Hyper-V, which sits on top of Windows (back doors further down the stack). Microsoft tells the NSA about these back doors. To give the latest example of back doors, see this new report [2] which says: “Nearly 30 days after reports of a zero-day flaw being exploited in the wild, Microsoft will finally patch this critical vulnerability.”

Relying on Microsoft for technology means that one should also expect and accept back doors. A reader showed us this new article, claiming that “Mono [is] infecting Android,” but it’s not just Android. Even Red Hat is now making such mistakes, in addition to hiring from Microsoft for management of virtualisation. Based on [2,3], Red Hat now accommodates Microsoft .NET applications, despite them being proprietary and potential back doors. A week or so ago some speculated that Microsoft might buy Red Hat (one day) [4,5] and yesterday we found the article “Why Microsoft Will Pick Off Red Hat” (logic of investors, not technical people).

Microsoft is now knowingly abandoning hundreds of millions of Windows users, leaving them with permanent back doors [6,7], so why should Red Hat trust Microsoft .NET applications or anything that comes from Microsoft, including Hyper-V? Articles like [8-10] remind us that in GNU/Linux the main flaw is human error (not changing default passwords or not applying patches, which Red Hat is making easier to apply without any downtime [11]).

The bottom line is, Red Hat’s relationship with the NSA withstanding, it oughtn’t connect too much to Microsoft components like .NET and Hyper-V because these constitute back doors that jeopardise security of GNU/Linux users.

Related/contextual items from the news:

  1. Microsoft to Fix an Internet Explorer Zero-Day Flaw
  2. Red Hat Adds Microsoft .NET to Its OpenShift PaaS
  3. A Red Hat stunner: ‘Miccosoft .NET apps on OpenShift’ Yes, you read correctly

    On Wednesday, Working with Uhuru Software, Red Hat is now incorporate a rival Microsoft product – .NET – to its three-year-old OpenShift platform-as-a-service. Really? Red Hat even published a blog to explain what’s going on to those who might find the concept a bit unbelievable.

    Chris Morgan, the OpenShift Partner Ecosystem Technical Director for Red Hat, wrote the blog – and even he acknowledged the incredulity of it all that something from Microsoft, which for years has been an enemy of Red Hat, Linux and Open Source, would be incorporated into OpenShift.

  4. An Indecent Proposal: Microsoft and Red Hat?
  5. Reviews, Indecent Proposal, and Ubuntu Graduation

    Today brings two new reviews. Jesse Smith reviews Linux Mint Debian Edition 201403 in today’s Distrowatch Weekly and Jamie Watson posts his latest hands-on. Steven J. Vaughan-Nichols says folks don’t care about operating systems anymore. Matt Hartley has a few suggestions for those ready to graduate from Ubuntu. All this and more in tonight’s Linux news review.

    Jesse Smith tested the latest LMDE in this week’s Distrowatch Weekly. He found a few bugs but Smith says it “lives up to its description” of having “rough edges.” With all its “nasty surprises” Smith suggests folks just stick with the Ubuntu-based version of Mint. But see his full review for all the details.

  6. Perspective: Microsoft risks security reputation ruin by retiring XP

    A decade ago, Microsoft kicked off SDL, or Security Development Lifecycle, a now-widely-adopted process designed to bake security into software, and began building what has become an unmatched reputation in how a vendor writes more secure code, keeps customers informed about security issues, and backs that up with regular patches.

  7. Positive Feedback: M$ Uses XP To Publish The Insecurity Of Using That Other OS
  8. Flaws In People And Their Software
  9. Red Hat Risk Reflex (The Linux Security Flaw That Isn’t)

    News headlines screaming that yet another Microsoft Windows vulnerability has been discovered, is in the wild or has just been patched are two a penny. Such has it ever been. News headlines declaring that a ‘major security problem’ has been found with Linux are a different kettle of fish. So when reports of an attack that could circumvent verification of X.509 security certificates, and by so doing bypass both secure sockets layer (SSL) and Transport Layer Security (TLS) website protection, people sat up and took notice. Warnings have appeared that recount how the vulnerability can impact upon Debian, Red Hat and Ubuntu distributions. Red Hat itself issued an advisory warning that “GnuTLS did not correctly handle certain errors that could occur during the verification of an X.509 certificate, causing it to incorrectly report a successful verification… An attacker could use this flaw to create a specially crafted certificate that could be accepted by GnuTLS as valid.” In all, at least 200 operating systems actually use GnuTLS when it comes to implementing SSL and TLS and the knock-on effect could mean that web applications and email alike are vulnerable to attack. And it’s all Linux’s fault. Or is it?

  10. Linux Bugs, Bugs Everywhere

    “We are seeing a lot of crypto bugs surfacing lately because these libraries are suddenly getting a lot of review thanks to Snowden’s revelations,” suggested blogger Chris Traver. “I think one has to separate the crypto bugs from others because they are occurring in a different context. “From what I have read about gnutls, though, it seems to me that this is probably the tip of the iceberg.”

  11. Introducing kpatch: Dynamic Kernel Patching

    In upstream development news, the kernel team here at Red Hat has been working on a dynamic kernel patching project called kpatch for several months. At long last, the project has reached a point where we feel it’s ready for a wider audience and are very excited to announce that we’ve released the kpatch code under GPLv2.

Share this post: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email
  • Google Bookmarks

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

What Else is New


  1. The Founder of Black Duck Still Works for Microsoft

    Black Duck‘s founder, Doug Levin from Microsoft, isn’t doing a terrific job hiding his real loyalties and ‘masters’



  2. IRC Proceedings: Monday, July 13, 2020

    IRC logs for Monday, July 13, 2020



  3. Links 14/7/2020: Claws Mail 3.17.6 and RSS Guard 3.7.0 Released

    Links for the day



  4. Microsoft Has Put the String “0xBIGBOOBS” Inside Linux (Kernel Driver for Microsoft's Windows-Only Proprietary Software, Formerly a GPL Violation); Reddit (Condé Nast) Bans You For Mentioning Such Things

    In this increasingly crazy atmosphere of mass sanctioning and permanent banning (removing everything or everyone that's perceived to be impolite) even "Linux" forums are banning people who point out Microsoft being a rogue corporation that's attacking GNU/Linux



  5. There's Apparently a New Boss (or Policy) at Red Hat/IBM

    The Fedora project doesn’t seem to care much about free speech, no matter one’s seniority in the project; as the person who relayed it to us has just put it, “they even eat their own.” (Longtime contributors) “He’s not a troll. He’s a contributor who rubbed some people the wrong way and now the banhammer is coming out. Fedora KDE was already collapsing and now it finally will.” (Note: Rex Dieter leads or led this project)



  6. There Cannot be Software Freedom Without Free Speech (Which is Nowadays Being Wrongly and Creatively Conflated With Racism)

    The time to speak out in favour of free speech is now; because the next phase typically involves removal (to be sold as "voluntary") of people whose political views are seen as professionally inadequate (recall what they did to Richard Stallman last September)



  7. [Humour/Meme] 'Offensive' Jokes

    Even humour itself is under attack now; people who cannot take/tolerate cartoons and banter are targeting the stand-up comedians, the cartoonists and so on



  8. The Media Does Not Like Talking About Linux (Which It Doesn't Understand Anyway). It Makes the News All About Linus.

    Just like back in May (or every other week) the news about Linux itself is being ignored and the subject is getting personified to make Linux seem rude and unruly



  9. Links 13/7/2020: Linux 5.8 RC5, Qt Creator Beta, Mexico Threatens GNU/Linux

    Links for the day



  10. [Humour/Meme] Embrace, Extend, and Curl

    The Curl project, a high-profile prisoner of GitHub, is again being 'embraced' by Microsoft (which already controls the project through GitHub)



  11. IRC Proceedings: Sunday, July 12, 2020

    IRC logs for Sunday, July 12, 2020



  12. [Humour/Meme] Half a Decade Has Passed and EPO Management Was Never Held Accountable for Illegal Surveillance

    A lot of people may no longer remember it, but the EPO can break privacy laws — as it still routinely does — with no consequences whatsoever



  13. Cleaning the Code

    War must go on; but it'll be more diverse and inclusive



  14. Why We Care About (Mis)Use of Language in Technology

    Software development communities are being divided over issues that would likely not tackle actual racism in any meaningful and profound way (just a symbolic way)



  15. Links 12/7/2020: KF6 Progress Report, GNUnet 0.13.1, Nano Becomes Default Terminal Text Editor in Fedora

    Links for the day



  16. They Always Worked for Microsoft (Directly and Indirectly) and Were Financially Rewarded for That

    Nat and Miguel, now put in charge of new weapons against software freedom (e.g. GitHub and NPM), have long worked for Microsoft (Nat was also an intern there); Techrights was right all along about this pair



  17. Red Hat Betrayed the Free Software Community With Its Software Patents' Stockpiling Drive and Then a Sale to the Biggest Software Patents Lobbyist

    In 2020 Red Hat is little but a shadow of IBM, whose patent policy continues to threaten software freedom and whose lobbying for software patents (under the guise of "HEY HI") persists uninterrupted; this growing problem oughtn't be unspeakable



  18. Politically Correct Tech

    This new video entitled “Politically Correct Tech” covers a topic we’ve spoken a great deal about



  19. [Humour/Meme] High on Production, Stoned on Pseudoscience

    All-time high ‘production’ levels at the European Patent Office (EPO) do not mean what they want people to think and what they try hard to hide



  20. Missing From EPO Management: Actual Scientists

    Political figures and opportunists with connections occupy top positions at top European agencies; this assures self-destructive policies that diminish progress and cushion corruption



  21. All Software Should Come With a Cheat Mode

    Cheat modes are useful for developers because they enable debugging, and are sometimes called "Debug mode"



  22. Linus Torvalds Checks If It's Still Inclusive Enough to 'Bash' Bad Technology (of the Company Whose TPM Pusher Has Just Successfully Pushed to Remove Many Words)

    In the age of endless control of language (e.g. large corporations pushing for "inclusive" language whilst earning billions from bombing of 'inferior' countries) we see that it is still possible to condemn corporations on technical grounds (at least if you’re Linus Torvalds)



  23. Even Before Microsoft Paid ('Joined') the Linux Foundation Jim Zemlin Had a Preference for Microsofters

    Even years before the Linux Foundation was receiving money from Microsoft it had a tendency to hire Microsoft’s people for key positions (a lot of people no longer remember that, but it’s still in the public record; it was Jim Zemlin who approached if not chased Mr. Ramji to offer him the job and the colleagues saw no problem with that)



  24. IRC Proceedings: Saturday, July 11, 2020

    IRC logs for Saturday, July 11, 2020



  25. Links 12/7/2020: KDE Plasma 5.20 Preview and Elive 3.8.14 Beta

    Links for the day



  26. [Humour] The 'Orange One' Does Not Respect Judges Either

    More than two years after taking over the European Patent Office (EPO) António Campinos has done absolutely nothing to restore judicial independence of the Boards of Appeal of the EPO



  27. The Systemd Song

    Speak out about IBM's strategy before we're all using GNU/Linux distros 'barcoded' with systemd



  28. Monopoly (or Vendor Lock-in) is Not Modularity

    IBM cannot totally control the kernel, Linux; IBM's control over GNU/Linux may be worth even more than what it paid for Red Hat as that's the key to overpriced support contracts and the general direction of development (important trends such as file systems and various low-level stacks)



  29. The Internet Archive Doesn't Forget, Whereas the Internet and the Web Forget Very Fast

    World Wide Web history is grossly undervalued and preservation of such history (e.g. by the Wayback Machine) is taken for granted by far too many people; the robber barons of today benefit the most from erosion of collective memory as they get to rewrite the past to suit their present and future interests



  30. Environmentalism and Free Software Can be Viewed as Closely Connected and Help One Another

    Modest lifestyles are an overlapping pattern in the Free software community and green activists; there's room for alliances and collaboration, bettering society by reducing consumption and discouraging voyeurism


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts