02.11.15

Gemini version available ♊︎

Microsoft Back Door in Windows (All Versions) Intentionally Left Open For Over a Year, Existed for 15 Years

Posted in Microsoft, Security, Servers at 9:38 am by Dr. Roy Schestowitz

Summary: It has become more obvious that Windows back doors are there by design (or knowingly left there by intention) even after Snowden’s NSA leaks

THERE ARE SOME corporate media reports about Microsoft patches, but few realise the significance of it. Microsoft tells the NSA about unpatched holes in Windows and other Microsoft software, which is the equivalent of giving the NSA back door access.

As we noted some weeks ago, evidence shows that Microsoft doesn't care about security and it is evidently the same with Apple. They both sat on known flaws that were critical for longer than 3 months, refusing to patch them. Both proprietary software companies, which together command the lion’s share of laptop and desktop operating systems, simply refused to close back doors and only decided to do something at the very belated end because the public finally knew about them (Google let is be known).

“Both proprietary software companies, which together command the lion’s share of laptop and desktop operating systems, simply refused to close back doors and only decided to do something at the very belated end because the public finally knew about them (Google let is be known).”Dan Goodin, who typically spends his ‘journalism’ career bashing Free software over security, has finally decided to shift some focus and write about a massive Windows flaw. It’s a major one, no doubt; But no name, no “branding”…

In Goodin’s own words:

Microsoft just patched a 15-year-old bug that in some cases allows attackers to take complete control of PCs running all supported versions of Windows. The critical vulnerability will remain unpatched in Windows Server 2003, leaving that version wide open for the remaining five months Microsoft pledged to continue supporting it.

The flaw, which took Microsoft more than 12 months to fix, affects all users who connect to business, corporate, or government networks using the Active Directory service. The database is built into Windows and acts as a combination traffic cop and security guard, granting specific privileges to authorized users and mapping where on a local network various resources are available. The bug—which Microsoft classifies as MS15-011 and the researcher who first reported it calls Jasbug—allows attackers who are in a position to monitor traffic passing between the user and the Active Directory network to launch a man-in-the-middle exploit that executes malicious code on vulnerable machines.

The significant part is in the second paragraph above (“took Microsoft more than 12 months to fix”). We can interpret that as saying that the hole, which NSA used for over a year for back door access (because Mirosoft told the NSA about it), is finally being acknowledged to the public. Therein lies the ‘magic’ of proprietary software. Is the NSA now ‘done’ cracking all the world’s networks that have Windows in them? Is it now ‘safe’ to finally close this back door?

Microsoft Windows is an utter joke when it comes to security, as Microsoft’s own actions serve to show. Back doors surely look like the goal, not an error. Windows was recently used to crack Sony years after the NSA had cracked North Korea’s network. Those who knowingly used an operating system with back doors can’t blame anyone other than themselves and perhaps Microsoft/NSA. Misplaced blame these days typically names China, Russia, or North Korea.

Remember that Microsoft leaves security holes open/in fact anyway, no matter if versions of Windows are supported or not (upgrades are neither simple nor free). As Goodin’s former employer puts it:

What happens six months from now, on 14 July? That’s the date Microsoft issues its last security fix ever for Window Server 2003 – the end of extended support from the server operating system’s maker.

The article states that many servers will basically be left with permanent back doors. Many of them contain customers’ (or patients’) data.

As Robert Pogson put it, “Server 2003, which is due to go without support this summer won’t be fixed for a recent Patch Tuesday revelation of a vulnerability built-in by design a decade ago and impossible to fix without breaking everything…”

He concludes correctly: “Maybe it’s time people switched to GNU/Linux, an operating system not designed by salesmen. It’s not perfect but at least the bugs are fixable.”

Yes, even bugs with special names, logos, and “branding” — those that the corporate media loves to hype up.

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

Decor ᶃ Gemini Space

Below is a Web proxy. We recommend getting a Gemini client/browser.

Black/white/grey bullet button This post is also available in Gemini over at this address (requires a Gemini client/browser to open).

Decor ✐ Cross-references

Black/white/grey bullet button Pages that cross-reference this one, if any exist, are listed below or will be listed below over time.

Decor ▢ Respond and Discuss

Black/white/grey bullet button If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

DecorWhat Else is New


  1. IRC Proceedings: Tuesday, October 04, 2022

    IRC logs for Tuesday, October 04, 2022



  2. Links 05/10/2022: PL/Haskell 1.0 and RapidRows 1.0 Released

    Links for the day



  3. Links 04/10/2022: Introducing NVK, Kueue, Stellarium 1.0, WordPress 6.1 Beta 3, and OpenSSH 9.1

    Links for the day



  4. Linux Foundation Events Now 'Run' by Linux's Biggest Foe

    The Linux Foundation expresses gratitude, upfront, to only one company: Microsoft



  5. IRC Proceedings: Monday, October 03, 2022

    IRC logs for Monday, October 03, 2022



  6. Links 04/10/2022: Tor Project Board and Conflicts of Interest, More Politics

    Links for the day



  7. Microsoft Windows Sinks to Just 16% of the African Market

    As we noted yesterday, Windows is down sharply this month (27.1% market share worldwide) and the decreases are very significant in Africa, where Android (Linux-based) is spreading fast. Here’s a chart for Africa, showing Microsoft’s decrease to about 16%.



  8. IRC Widgets Working Again

    After turbulence and technical issues at KiwiIRC we've managed to get a semi-working solution or some workaround



  9. Trolled by Microsoft's Lennart Poettering and Bought by Wintel

    Last week’s public appearance by Torvalds seemed reluctant and a tad embarrassing (the media pointed out the awkwardness, too); whose idea was that, the Linux Foundation‘s?



  10. Links 03/10/2022: Git 2.38.0 and cinnabar 0.6.0rc1

    Links for the day



  11. Links 03/10/2022: OpenMandriva ROME Gold Candidate and IceWM 3.0.0

    Links for the day



  12. Members of the Administrative Council of the EPO Are Asked to Summon a Conference of Ministers of the Contracting States Due to Violations of the Law

    The EPO has turned into a farcical operation that laughs at the law, abuses its own staff, and lies to both staff and "customers" in the official Web site



  13. European School The Hague (ESH) Faces a Crisis and Families of EPO Workers Are Harmed Profoundly

    The European School The Hague (ESH) is not functioning like it’s supposed to; people who migrated (seeking a job) along with family members for an EPO position aren’t pleased (to say the least) and they request if not demand to speak with EPO management



  14. [Meme] Lowering the Bar With Nations That Barely Have Any European Patents (Close to Zero)

    The EPO has totally lost the plot; it completely neglected its mission in pursuit of money and optics



  15. Links 03/10/2022: GNU Linux-Libre 6.0

    Links for the day



  16. IRC Proceedings: Sunday, October 02, 2022

    IRC logs for Sunday, October 02, 2022



  17. Update on SeaMonkey 2.53.14 and NoScript Crashes/Palefills Not Working

    Reprinted with permission from Ryan



  18. Links 03/10/2022: Linux 6.0 is Out

    Links for the day



  19. GNU/Linux and the GPL in Particular Are Under Attack Because They Spread Fast (Like a 'Cancer')

    The good news is that GNU/Linux continues to expand (widespread usage); the bad news is, it has come under a sheer magnitude of attacks and the media barely bothers to mention the obvious



  20. Windows Majority in Asia Down to Just Three Countries, All-time Low for Windows Worldwide This Month

    The decline of Microsoft Windows continues; sooner or later Android (Linux inside) will be dominant in almost every country in terms of its market share or number of users



  21. Links 02/10/2022: Debian on Firmware Policy and PostgreSQL 15 RC 1

    Links for the day



  22. Links 02/10/2022: KStars 3.6.1 and DjangoCon Europe 2022

    Links for the day



  23. IRC Proceedings: Saturday, October 01, 2022

    IRC logs for Saturday, October 01, 2022



  24. Fedora 37 and SeaMonkey 2.53.14

    Reprinted with permission from Ryan



  25. 'Linux' Foundation, While Hoarding Over $200,000,000 Per Year, Calls Itself 'Non-Profit'

    This video (10:55-11:28 above), which was published a few weeks ago, gives insight into how much money the Linux Foundation and its proxies raise per year while paying Jim Zemlin [cref =164412 probably about $1.4 million per year already] (because it’s all so charitable)



  26. GNU/Linux Rises to Record Highs in Africa This Past September

    According to this map and these latest plots (based on data from about 3,000,000 Web sites), Windows majority is long lost in Africa and (‘proper’) GNU/Linux usage keeps rising (not just Android, which uses Linux)



  27. Ongoing Efforts to Convince OSI to Drop the Microsoft Funding (Which Comes With Strings, Such as the OSI Attacking the GPL)

    It's becoming increasingly clear that buzzwords and hype get misused to misframe and distract from abuses; we're meanwhile trying to convince the Open Source Initiative (OSI) to drop Microsoft because it pays the OSI for a disinformation campaign (portraying large-scale GPL violations as "AI")



  28. Richard Stallman on Libre Software

    Richard Stallman on Libre Software from LispNYC on Vimeo.



  29. IBM's Lobbying for (and Stockpiling of) Software Patents is Ruining Fedora and GNU/Linux in General

    Fedora suffers from software patents, hence it removes features while IBM lobbies for such patents and gives software patents to patent trolls (in patent sales)



  30. Microsoft Doesn't Like Open Source; It's Badmouthing, Stereotyping, Attacking It (to Shift Blame)

    This week I found out that a dear old friend lost all his money (about 150,000 pounds) due to a Microsoft LinkedIn scam; watch how Microsoft blames unpopular nation states, “open source”, the victims, and attackers (basically anyone but Microsoft), just as it does when defects in its software go unfixed for months


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts