Bonum Certa Men Certa

Microsoft Services Cyber Crime

Cowboy 1887



Summary: A look at some news about (in)security and how it relates to Microsoft's role on the Web

JUST OVER a decade ago Microsoft decided to increase its online presence and gradually after it had acquired Hotmail, the service became a mess and probably the world's largest source of SPAM (except Windows zombies). Last week in the news we found:



1. Botnet pierces Microsoft Live through audio captchas

The prolific Pushdo spam botnet has found a new way to penetrate Microsoft's Live.com by exploiting weaknesses in the audio captchas designed to prevent automated scripts from accessing the popular email service.

A new version of the bot causes infected PCs to pull down Live.com audio captchas and return the correct response within 10 seconds, according to a researcher at anti-virus firm Webroot. The attack allows the zombie machines to send email through accounts with a Live.com address, which are whitelisted by many spam filters. The technique offers spammers an alternative to sending spam through open mail relays, which are often blacklisted.


2. MS coughs to Hotmail block

Microsoft has apologised to its UK Hotmail users after some of the software vendor's IP addresses were embarrassingly blocked due to spamming.

"Microsoft is dedicated to providing the most trusted and protected consumer experience on the web," said a Redmond spokesman.


For obvious reasons, it breeds poor security (some of this mail can be phishing and malicious executables for Windows). Also in the past week's news we have:

3. Beware Botnet's Return, Security Firms Warn

Why Rustock has adopted this technique is open to debate. Adding TLS to outbound spam slows the rate at which spam can be delivered, which would seem to hurt the spammer's intention to spread non-legitimate email as far and fast as possible. It is also the case that TLS-encrypted email is no longer automatically trusted by receiving servers, so it is unlikely to be a simple evasion technique.


4. Unfashionable DDoS attacks still menace websites

Internet security research firm Team Cymru has begun publishing a four part series explaining the hows and whys of denial of service attacks.


5. Trojan poses as Adobe update utility

Duc explains: "From analysis, we found that malware is written in Visual Basic, faking such popular programs as Adobe, DeepFreeze, Java, Windows, etc. In addition, on being executed, they immediately turn on the following services: DHCP client, DNS client, Network share and open port to receive hacker’s commands."


6. New Malware Overwrites Software Updaters

For the first time security researchers have spotted a type of malicious software that overwrites update functions for other applications, which could pose additional long-term risks for users.

The malware, which infects Windows computers, masks itself as an updater for Adobe Systems' products and other software such as Java, wrote Nguyen Cong Cuong, an analyst with Bach Khoa Internetwork Security (BKIS), a Vietnamese security company, on its blog.


Microsoft's presence online may turn out to be more of a curse (SPAM is a nuisance not just to Windows users [1, 2, 3, 4, 5, 6]) than a benign existence. Comes vs Microsoft Exhibit PX06959 (2001) [PDF] is an E-mail from Steve Ballmer about "Transforming Microsoft into a Software Services Company." Microsoft sure became quite a service -- for cyber criminals. We append the text of this exhibit beneath. We also wish to point out that Microsoft saw GNU/Linux as a competitor one decade ago, but AOL too was seen as a "greatest competitive challenge". Ballmer wrote:

We face plenty of competitors in this new world - not just Sun, Oracle, IBM and Linux, but perhaps our greatest competitive challenge is America Online.


At least with AOL there weren't quite so many security blunders.




Appendix: Comes vs. Microsoft - exhibit PX06959, as text










From: Steve Ballmer Sent: Thursday, April 05, 2001 7:19 AM To: Microsoft: All FTE; WebTV Wnifolk Subject: Transforming Microsoft into a Software Services Company

Two years ago, we committed to a vision for the future in which consumers and businesses will increasingly access the benefits of software through services, any time, any place, on any device. Since then, we have been working hard to build the foundation that will enable us to make software services an integral part of Microsoft's business. Through our efforts on MSN and .NET and groundbreaking work on projects like NetDocs, we have developed a tremendous set of assets: great momentum with users through the delivery of best-of-breed services, strong expertise in operations, programming and revenue models, and strong relationships with industry partners. We have also made significant advances in building the infrastructure to support services for our core products, culminating with the forthcoming releases of Office XP and Windows XP.

These efforts position Microsoft well for future growth and revenue opportunities. But as the Web evolves from a model of individual sites to an integrated set of services, we need to evolve our business model as well by aligning all the great work we have done in recent years on services with our long-term innovation of Windows and Office. This is important not only to provide customers, developers and partners with the next generation of technology tools, but also for Microsoft to stay competitive in a highly competitive, fast-changing industry.

We face plenty of competitors in this new world - not just Sun, Oracle, IBM and Linux, but perhaps our greatest competitive challenge is America Online. AOL makes no secret of their goals - they want to become the place where users live on the Internet - they want to provide so much content and services that consumers never want to leave AOL's "walled garden." We are competing with AOL, and I believe we have a vision that will be more attractive to consumers. Our plan is to create a far more open approach - to build a services platform that will enable Microsoft and thousands of other companies to create an incredible array of rich content and great services that interoperate with one another, and to give consumers more choice and control.

At the heart of our vision for delivering great products and services are three business objectives that I want to talk about today:
- Ensuring that we continue to improve and innovate in our flagship desktop products - Windows and Office - on behalf of customers;

- Building a software services platform that Microsoft and third-party developers can use to create compelling end-to-end experiences for users;

- Delivering profitable value-added software services for individuals and advertisers built on this new platform.
No less important is our continuing work in the Enterprise, with developers and with smaller businesses. There is huge upside opportunity in the server business and we will continue to pursue this opportunity aggressively, as well as our efforts to provide great tools and opportunities for developers, and business applications for smaller businesses. Our Great Plains acquisition, which was successfully concluded today, underscores our strong commitment in this last area. These are key businesses for us that remain unchanged based on today's announcements outlined in the rest of this mail.

Our Strategy

More PCs will be sold this year than ever before. Anyone who says the PC is dead either isn't paying attention or is engaged in some competitive wishful thinking. Microsoft and the rest of the technology industry have a remarkable opportunity to continue to add value to this remarkable device as well as a host of other devices that are building on PC technologies. As the popularity of the personal computer continues to grow, consumers and knowledge workers will expect more from their computers and their office productivity software, including greater functionality and ease of use.

So we will continue to advance our flagship Windows and Office products, building even better versions that will enable consumers to benefit from a host of related services. Increasingly, consumers expect their computers to easily provide access to a host of audio, video, email, calendar, ecommerce and other activities. And knowledge workers increasingly expect their software to interact seamlessly with networks and data stores and information on the Internet, to help bring new insights and efficiency to their work.

To deliver on these customer needs, we will focus on five core areas:
- We will continue to invest in Windows. That means continuing to listen to our customers and adding great new features that will enable consumers and developers to get the most out of the computing experience. In the months and years ahead, we will increase the value of Windows to customers and developers with a well-integrated set of communications and content services. These services will include things like Passport, a single sign-in service that will make it easy for consumers to access their email, calendar, real-time communications, and programmed content - from any device, any time, anywhere. We will make it easy for any independent software developer to create great services that tap into and benefit from the convenience and opportunities of Passport. In addition, Microsoft will develop some services offerings of our own to continuously improve and advance the consumer experience. Our goal is to make Windows a great services platform, and to enable a seamless user experience between applications and services from Microsoft and from third parties.

- We will continue to invest in Office. Once again, that means listening to aur customers and responding to their input. Our upcoming Office XP release is a great example of how we are working to make productivity simple, enable collaboration and extend Office beyond the desktop. Moving forward, we will continue to evolve Office to keep pace with the rapid evolution of business needs. Knowledge workers of the future are going to expect their software to do more, so we will evolve Office into a services-based business - currently code-named Office.NET - which will offer unprecedented corporate-level communications services, extensibility, ease of use and mobility. This rich communications client will also be the basis for our Personal.NET subscription service, outlined below. We also wlll continue to develop service-based versions of our other Office productivity tools.

- As service-based experiences become a greater part of everyday life, we need to do even more to help consumers get the most out of entertainment and communications. We will be creating a premium consumer subscription productivity service, currently code-named Personal.NET. Designed for home users, Personal.NET will combine some of the great communications services created by the Office group with premium MSN services and current consumer software offerings such as Encarta, Money, Picture It! and others.

- To make all of this possible - and to make it easy and convenient for consumers and independent software developers alike - we are developing a single services platform that will provide the underlying infrastructure for MSN, for Office.NET and Personal.NET, and for the rich, interoperable services developed by third parties. At the heart of these services is the new Hailstorm platform that will enable people to connect Internet applications, devices, and services together into a "personal network". We will continue to grow the user and revenue momentum we have achieved with MSN by building best of breed services, rich programming and key partnerships that will provide the most compelling user experience - any time, any place - across a wide range of devices.

Setting Clear Organizational Goals and Working Together

To continue to deliver great products today, while simultaneously moving toward a services-oriented future for our customers, we are taking several steps to realign and fine-tune parts of our organization. Given the need to create dynamic and easy-to-use platforms and services for consumers and our developer partners, it will be more critical than ever for all of us to work together - in a spirit of collaboration - toward our goal of making services an integral part of all our businesses.

In addition, we are using this opportunity to help balance the workload amongst our senior execulives. Seven weeks ago, we named Rick Belluzzo as President and Chief Operating Officer. In order to enable Rick to more clearly focus on his broad challenge, and allow greater coordination of our service development efforts, Bob Muglia and his team will now be reporting to me. In addition, we are making some other adjustments to support the strategies outlined above. Personal Services Group: Group Vice President Bob Muglia will have responsibility for the unified services platform, the Personal.NET effort, Paul Gross' existing Mobility Group, and Kai-Fu Lee's teams focused on search, natural language and speech work. In support of the unified services platform, David Cole's Services Platform Division will have responsibility for building and operating all of our .NET services, the consistent services infrastructure for Windows, MSN, Personal.NET, and Office.NET, as well as the billing system for the company's services. Craig Unger and his Hosting Platform team will move to David's organization to help with this effort. The creation of a single services infrastructure group will provide developers with a single and consistent set of back-end services and tools that provide interoperability across Web sites and services. This, in turn, will help ensure that consumers have a consistent experience when moving between products and services, regardless of whether they are provided by Microsoft or by partners. Ted Kummert's team will continue to be responsible for providing competitive offerings in both dial-up and broadband access. Kai-Fu Lee and his team will focus on natural interactive services, including speech, natural language and search, in support of our services efforts. As a part of this change, Bill Bliss and the MSN Search team will be moving to report into Kai-Fu. Paul Gross's Mobility Group will join the .NET Services team to ensure that our mobile devices and associated server-based infrastructure are aligned with our services efforts.

We also will be centralizing our Personal NET efforts under one team reporting into Bob. In addition to its work supporting MSN, this team will focus on the evolution of our packaged consumer products - such as kids' software, personal finance, Works, Encarta and Picture It! - into subscription service offerings. The VP for this team will be named in the future, with Bob serving as acting manager for the current time. This team will include Jeff Camp's MSN Music Service from Lindsay Sparks' E-Services Group, Lisa Brummel's Home Products Division, and Rich Bray's Financial Products Group.

MSN & Personal Services Businesses Group: To continue the great momentum we have with MSN, and to advance the benefits of our consumer web services across company efforts, I am pleased to announce that Yusuf Mehdi will step up to run network programming, business development, and worldwide sales and marketing for MSN and our other services efforts. Yusuf will report to Rick Belluzzo and will partner with other teams across the company to help drive the MSN business, optimize our services efforts for Windows, and grow the Personal.NET subscription business. Yusuf will also manage key components of the MSN service, including MSN eShop, MSN Carpoint, MSN HomeAdvisor, the MSNBC relationship, Slate and MSNTV.

Platforms Product Group: We want to make the PC the premier 'connected' device for the Internet by making services a natural extension of the Windows experience. In the same way that networking and connecting to the Internet are natural extensions of what people do on the PC today, we want to make services from Microsoft and others, such as storage, communications, notification, sharing of photos and listening to music, easily accessible to customers directly from within the Windows experience. Group VP Jim Allchin will continue to manage the Platforms Product Group, which has primary responsibility for continuing to evolve the Windows platform. In addition, Jim will share responsibility with Bob Muglia's .NET Services Group for evangelizing the benefits of our products to developers. To continue to advance the Windows user experience and implement a consistent user interface framework across Windows, MSN, Personal.NET and Office.NET, Joe Peterson's user experience team (.NET User Experience, Mars, and Home-page) will join Chris Jones' Windows User Experience group. In addition, this team will be responsible for developing the communications services client for Windows and MSN, as well as supplying a more consistent services experience for earlier versions of Windows.

Productivity and Business Services: Jeff Raikes will continue to drive our broad productivity vision and lead the effort to evolve a service-based product that builds on the rich functionality and capabilities of Office today and grows seamlessly with customer needs in the future. Delivering on the rich communication experience that will be the basis for our Office.NET and Persanal.NET services, as well as broadening the role of Office, will be the mission of the Office team. NetDocs will be joining the Office team in support of this mission. Together, the teams will be working out plans that will deliver a great customer experience by building on the Office.NET plans and NetDocs technology. The addition of NetDocs technology will also greatly enhance our ability to deliver software as a service for our total complement of productivity offerings, including Business Tools Division, Sharepoint Portal Server, and Emerging Technologies

Acknowledging Two Leaders

Finally, I want to acknowledge two people who have been very important to Microsoft's success.

Senior Vice President Brian McDonald is taking a temporary personal leave to spend time with his family. Brian is a very important contributor at Microsoft and we look forward to his return. In the meantime, much of his core work - including the work on the development of NetDocs technology - will remain crucial as we transition Office to the software services model. Brian has played a key role since he joined in 1989 when Microsoft purchased his company, which created the software later named Microsoft Project. Prior to running the Subscription Services Division, Brian was vice president of Knowledge Worker Services, and before that he started and led the group that created Microsoft Outlook.

Senior Vice President Brad Chase has decided that he wants to pursue some new challenges. Brad has been a key player in Microsoft's success. Before leading the effort that has made MSN the most popular destination on the Web, Brad managed the Windows Marketing and Developer Relations Group where he was responsible for shaping the Windows 2000 business strategy and our evangelism to developers. In addition, he worked on the first five versions of Internet Explorer technology and was central to the remarkable growth in popularity of IE. Brad also led the highly successful marketing strategy, execution and worldwide launch ot Windows 95. Brad and I will be working together to define a transition.

This is a challenging and exciting time - not just for Microsoft, but for the entire high tech industry. I am excited and optimistic about the future of this company. Our customers are expecting great things from us, and we have the vision and the ability to deliver on their expectations. In the months and years ahead, we have the opportunity to build on our strong tradition of building great software - and to take our game to an even higher level by delivering exciting new services and a rich services platform for developers around the world.

I look forward to working with all of you to make these plans and visions a reality.

Steve


Recent Techrights' Posts

Project 2030 to Cover How "Project 2025"-Styled Anti-Media Zealots From America Targeted Techrights and Tux Machines
The common denominator is also their attacks on women
Brett Wilson LLP Failed to Meet Deadlines Set by Judge 7 Months Earlier, Tried to Ruin Our Holiday, Then Had the Audacity to Ask Us for Over 3,000 Pounds for Its Own Lateness
As a matter of principle we will never respond to assassin while we are on holiday
Americans Attacking British Sites Only Months After They Leave America
We find it kind of funny if not ironic that this site, originally an American site, got legal harassment only from Americans and only months after it had moved to the UK
Despite Losing Over a Quarter Million Dollars a Year Software in the Public Interest (SPI) Gives Helping Hand to Libreboot
SPI's financial state depends a lot on its public image or its reputation
If You Want to Know the Future, Listen to the Free Software Foundation (FSF) and Andy Farnell
We're sure the FSF will have plenty of its own output
 
Brett Wilson LLP Seem to Have Had Only One Litigation Client in 2025, He Was Previously Charged, Just Like the Serial Strangler From Microsoft (Whom They Now Represent)
Karma is superstition, regulators are not
On Claims That After Bluewashing Red Hat Will Increasingly Become an Indian Company
Discussed this week (long and detailed)
Slopwatch: Google Helps Plagiarism and Sends Traffic to Ripoff Artists
That Google as a company helps spamfarms is noteworthy
Links 18/09/2025: A Taliban Ban on Internet Access and Troubled US Job Market
Links for the day
Gemini Links 18/09/2025: Computer Literacy and Accessing Alhena's Database
Links for the day
Links 18/09/2025: US War on Media (Truth Banned, Cancel Culture by the Hard Right), NYT Chief Executive Warns Cheeto is Deploying ‘Anti-press Playbook'
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, September 17, 2025
IRC logs for Wednesday, September 17, 2025
Slopwatch: Fake Articles, Fake Text, Fake Images, Negative Slant on "Linux"
Google News has lost its value; the signal-to-noise ratio has fallen off a cliff
Gemini Links 17/09/2025: Relax-and-Recover on Proxmox and New Smolweb File Transfer Service
Links for the day
Fact: EFF Got Corrupted by Corporate Money. Microsoft Lunduke (Political Noise): The Issue With EFF is, It Kills Babies.
Microsoft Lunduke - as usual - finds a way to make it about abortions
Pacing Publication Up a Bit
The news cycles have gotten rather light and slow
Links 17/09/2025: Power Outages, Digital Controls, and Attacks on the Mainstream Media (by Insecure and Corrupt Dictators)
Links for the day
Gemini Links 17/09/2025: Flashing LineageOS and ROOPHLOCH
Links for the day
Links 17/09/2025: Long COVID Study, "Exposing Pegasus", and Chatbots Exposing Sensitive Data
Links for the day
Links 17/09/2025: Secret Settlement for Internet Archive and Google’s LLM Slop Summaries Attracting Lawsuits
Links for the day
The True Cost of 'Generative Models'
Funded and promoted by the companies that profit from the waste
'Big Slop' Attacks Contemporary Information/Knowledge and Creative Works, 'Big Copyright' (Cartel) Attacks the Old
Someone at IA will hopefully "blow the whistle" on what they actually agreed
Why We Find It Difficult to Trust Rust
A comparison between C/C++ and Rust
Slop Nihilism is Funded by Big Oil
Eventually human civilisation will destroy itself
Watching the OSI: Our Series Will Carry on Irrespective of the Chief's 'Resignation'
the OSI isn't even the real guardian of the term "Open Source"
Professor Eben Moglen Recovering From Open Heart Surgery
From his public pages (this is not secret)
Just What LibreOffice Needs? Another Language? (Rust)
what's all this concern about memory safety?
Many Microsoft Managers Are Leaving
"Hey hi" chaff or chaff about "hey hi" cannot eternally distract from the difficulties inside the company
There Are Red Hat (IBM) Layoffs, But Google News is Infested With Slopfarms
It contributes a lot to misinformation and it encourages plagiarism
Tomorrow, Microsoft's Tim Anderson's 'The Register MS' Offshoot Will Have Been Inactive for 2 Months (There's Also a Slop Problem)
We've already caught The Register MS using LLM slop for articles
Microsoft's Chief Legal Officer Leaves Microsoft After Nearly 30 Years
And not retiring
Even Windows Users Are Having Problems With "Secure Boot"
When it comes to security - Microsoft strives for the very opposite
Another Competition Crime of Microsoft, Long Facilitated and Advocated by a Bad Actor, Who is Funded by a Third Party to Commit Extortion Against People Who Have Correctly and Repeatedly Warned About It for Over 13 Year
We must always go back to the core issues
3 More Reasons to Replace Mozilla Firefox With LibreWolf
Thankfully there are de-enshittified versions of Firefox
USA Not a Place for Free Speech
In America, as in the US, the attacks seem more enhanced or advanced these days
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, September 16, 2025
IRC logs for Tuesday, September 16, 2025
Links 17/09/2025: Google Layoffs in "Hey Hi" (AI), Perplexity Hit With More "Hey Hi" (Plagiarism) Lawsuits
Links for the day
Gemini Links 17/09/2025: Reclaiming Things in a Digital Age and Moon Phases in CGI
Links for the day
Slopwatch: Google News is Slop, Google News is Plagiarism, Google News is Dying
Google is off the rails
Links 16/09/2025: "The Censorship Alarm Is Ringing in the Wrong Direction" and ASRock Does Microsoft E.E.E. on GNU/Linux
Links for the day
Serious "Breach of Confidentiality of Personal Data" in Europe's Second-Largest Institution, the EPO
Yes, the same EPO that routinely uses "data protection" and "GDPR" as a pretext for hiding or covering up its corruption and white-collar crimes (it even uses that as an excuse for refusing to obey courts' orders)
Adrienne Rockenhaus Says Her Husband Was Arrested for Running Tor and Denied Basic Rights in the United States
the US seems to be getting "russified" in its approach towards Tor
This is What Happens When Microsoft Canonical Lets Decisions on Ubuntu be Made by a Youngster From the British Army (Where He Did Mass Surveillance)
"Is Ubuntu Compromised?"
Back Doored Windows Giving GNU/Linux a Hard Time (Under the Guise of 'Security')
Is this complication intentional? Most likely, yes
Links 16/09/2025: Science, Security, and Conflicts
Links for the day
Gemini Links 16/09/2025: Command-line Options in POSIX Shell and Introducing Acre 0.9
Links for the day
Microsoft 'Secure' Boot Versus Dual Boot With GNU/Linux
they're meant to assume everything is OK
Links 16/09/2025: While Oracle Pretends to be Rich It's Firing About 70 MySQL Workers, "Oracle's Revenge" (Faking Demand With "AI")
Links for the day
Microsoft Has Just Published a New Web Page About "Secure Boot Update Process" (Microsoft Also Admits Issues; PCs Can Stop Booting)
Why was this page issued and published only hours ago?
Microsoft Lunduke: I Spread Hate and Then I Receive Hate
Cry us a river, Microsoft Lunduke
"Use Wayland" Isn't a Bugfix for X (X11 is Still Necessary)
They tell us X is "dead" and we must all be herded into Wayland ASAP
"Disable Secure Boot and Fast Boot. Wipe and Start Over."
At least they didn't say, buy a new computer...
The Oracle Ponzi Scheme
Oracle isn't doing well, but it's nowadays fashionable to say "clown" and "hey hi" to prop up one's stock, even based on nothing at all
The New Head of OSI is an "Hey Hi" (AI) Obsessed Person
when Bryant says "AI" that doesn't mean AI
Taking Out the Battery, Opening Up Your Computer, Just Like a "Normie" Would
At this stage, any person who still says "enable Secure Boot" is misguided or persuaded by companies that sell rootkits
Slopwatch: Serial Sloppers and Slopfarms Still Infesting Google News (Fake 'Articles' About "Linux" Spreading FUD)
searching for "Linux" today yields a lot of FUD
"Governments, local authorities, schools and hospitals can lead by example by procuring only Free Software"
Crossposted from Tux Machines
Cindy Cohn Leaving the Electronic Frontier Foundation While Its Co-founder John Gilmore, Whom She Apparently Helped Oust, Will Celebrate 40 Years of the Free Software Foundation, Inc.
EFF has been busy hoarding GAFAM money, whereas the latter is where all the real activism is done
The Reach of Techrights Has Broadened
We nowadays cover a broader range of issues
"Google is Googlebombing KDE's Project Banana"
So is Google googlebombing KDE's Project Banana? You decide.
Complicating Things for No Actual Benefit, Just Added Risk and More Difficulties Adding GNU/Linux and BSDs
Watch what it's like for people who wish to use BSDs
Some Very Large IRC Networks Are Growing
IRC will turn 38 next year
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, September 15, 2025
IRC logs for Monday, September 15, 2025
Links 16/09/2025: Autumn Party, RPG Planet, and Optical ROOPHLOCH
Links for the day