Bonum Certa Men Certa

Microsoft Won't Secure Firefox/Chrome Users, Shows More Negligence

Web browser icons



Summary: ActiveX required by Microsoft's OneCare; investigation into Vista 7 vulnerabilities a case of "too little, too late"

MICROSOFT pretends to have changed for the better. It pretends that it allows users of Windows to use Web browsers other than Internet Explorer, but the following post -- artistically titled "Microsoft being a Onecare [Wanker]" -- suggests otherwise:

For starters, it uses an ActiveX control - Internet Explorer required in other words - that's annoyingly hard to install. You get warnings galore from Windows 7's UAC and IE about popups and do you really really really want to install something that has the potential to roger your system well and truly?


ActiveX was designed to restrict competition by supplanting Web standards. It ended up becoming one of the biggest security nightmares out there and Novell supports this.

Here is the new story of a man who has just been fired because of these practices from Microsoft:

Linux Contractor Fired for Using Firefox/Linux



[...]

The irony? The "compentency test" was a Security & Privacy test from the four letter credit card company that HAD to be taken on MS Windows with IE?

I'll let you be the ones to point out the obvious...the fact that this large computer/server company with three letters in their name is reportedly a "friend to Linux". I'll let you talk about how a Linux Professional who uses Linux as their desktop environment was denied access to employment. Employment that was based on his knowledge of Linux. Yeah, the server side...but still...

Now let's brag about how much ground Linux has made...

And a Linux Project Manager for said company asking the question:

"What's this Foxfire thing?"


As a secondary item of news, some days ago we argued for Microsoft liability when it comes to the latest Vista 7 vulnerability. Microsoft deserves to be accused of negligence and the following article implies deception too.

Is Microsoft Overhyping Security In Windows 7?



[...]

Microsoft has been aggressively marketing the security improvements in Windows 7, but some security experts believe this strategy could leave the software giant open to some unpleasant repercussions.


Vista 7 has been breached before and to give some examples of insecurity, we have:



Now there is the SMB flaw that Microsoft finally acknowledges.

Microsoft on Friday said it is working on a fix for a vulnerability in the Server Message Block file-sharing protocol in Windows 7 and Windows Server 2008 Release 2 that could be used to remotely crash a computer.


It really took them too long, having waited for attack code to appear before properly investigating. That's negligence and it is irresponsible. Gregg Keizer writes:

The zero-day vulnerability was first reported by Canadian researcher Laurent Gaffie last Wednesday, when he revealed the bug and posted proof-of-concept attack code to the Full Disclosure security mailing list and his blog. According to Gaffie, exploiting the flaw crashes Windows 7 and Server 2008 R2 systems so thoroughly that the only recourse is to manually power off the computers.


Why has Microsoft waited so long before looking into the problem? Could it be that lack of security and increased fear help Microsoft sell more 'solutions' to those very same problems? As we showed some days ago, [cref Microsoft is clearly profiting from Conficker], for example.

Comments

Recent Techrights' Posts

Links 03/10/2024: "Hey Hi" Scandals and Copyright/Trademark Disputes
Links for the day
Invidious Seems to be Nearing 'End of Life' After Repeated Crackdowns by Google/Alphabet/YouTube
To Free software users, YouTube ought to become a "no-no"
Links 03/10/2024: Climate Issues and Tensions in East Asia
Links for the day
Like a Marketing Department of Microsoft, Canonical Sells Back Doors and Surveillance as "Confidential" and "Hey Hi" (AI)
Notice how Canonical has made no statement critical of Microsoft for years
Gemini Links 03/10/2024: Frozen Tofu and SGI O2
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, October 02, 2024
IRC logs for Wednesday, October 02, 2024
Links 02/10/2024: Microsoft Spying on Windows Users Grows, Microsoft's Surveillance Arm LinkedIn Used to Highlight Employment Crisis
Links for the day
Links 02/10/2024: Students Who Can’t Read Books and Dead Butt Syndrome
Links for the day
Gemini Links 02/10/2024: GNU/Linux Distros, Flat-File Databases, and How the Web ate Gopher
Links for the day
Technology: rights or responsibilities? - Part II
By Dr. Andy Farnell
A Cost-Free Bribe From Microsoft
Daniel Stenberg is not dumb, but he seems rather gullible or unprincipled
Plans for the Site's 19th Year
Like TechDirt, we expect to devote more efforts/time to covering free speech online
Network Getting Faster
Loading up the site in 0.077 seconds
The Manchester Experience
Yesterday Tux Machines served 436,897 Web hits
If Red Hat Has Mass Layoffs This Year, Nobody Will Tell You About It
We seem to have entered a strange quasi-cosmic era wherein layoffs aren't disclosed anymore and news sites don't bother to report them, either
IBM, Kyndryl, Subsidiaries (Like Red Hat) and Silent Layoffs
Kyndryl follows in IBM's footsteps with rolling layoffs likely affecting thousands
Anniversaries and New Beginnings
The world needs more transparency and far less secrecy
Links 02/10/2024: Microsoft Kills Off HoloLens, Media Discusses Assange Speech
Links for the day
Gemini Links 02/10/2024: New Car, Broadband, and Gemtexter 3.0.0
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, October 01, 2024
IRC logs for Tuesday, October 01, 2024
[Meme] October 1st: The Day Julian Assange 'Officially Came Back'
Assange: See you in Strasbourg in 5 years
Full Transcript of Julian Assange's Speech in Strasbourg
the full thing
The Full Talk by Julian Assange Including Questions and Answers Discussed Further (October 1st 2024, Council of Europe Committee Legal Affairs)
Wikileaks covered this talk in "tweets"
Julian Assange's First Publicly Delivered Talk Since 2019
Julian Assange's talk in France
Links 01/10/2024: Another Escalation in the Middle East, Software Patents Being Squashed
Links for the day
Microsoft's Collapse is Continuing
Microsoft is discontinuing its HoloLens headsets
Links 01/10/2024: Gavin Newsom's Tech Safety Legislation, YouTube Sued for Health Harms
Links for the day
Gemini Links 01/10/2024: ROOPHLOCH and Photos
Links for the day
Julian Assange Talk: Watch Live
2 hours from now
"IBM executives did not decide to buy Red Hat on their own, nor will they decide to sell Red Hat on their own should that time ever arise"
Since IBM bought Red Hat it merely made its products more proprietary
GNU/Linux and Android Rose to New Highs in September
StatCounter isn't the ground truth, but there's not much else in the public domain.
Links 01/10/2024: Climate Stories, Climate Change, and War in Lebanon
Links for the day
Gemini Links 01/10/2024: Separation, Validation, and Flatfile Databases
Links for the day
Blind Worship of Technology is a Misguided Fool's Errand
Andy Farnell of the Cybershow used the metaphor of "golden calf" last week
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, September 30, 2024
IRC logs for Monday, September 30, 2024