Bonum Certa Men Certa

Windows Insecurity Becomes a Political Issue

Coburn and Obama discuss S. 2590



Summary: As wiretapping gets an upper hand in the United States and Iran's computing facilities (about 30,000 machines with Windows) come under attack, questions are asked about GNU/Linux as a true need

"Chinese Internet espionage against human rights activists and journalists" reveals this new article on which Glyn Moody commented by saying: "Windows-based, it seems" (it may seem related to the latest incidents reported in Russia [1, 2]).



As the world becomes increasingly connected and increasingly digital, the choice of technology matters a lot to politics, including foreign affairs. Last week we wrote about Stuxnet [1, 2, 3, 4, 5, 6, 7, 8, 9, 10], which some people suspect was targeting Iran specifically [1, 2, 3] and was designed for this purpose. Security guru Bruce Schneier does not believe that this is the case. Some days ago he wrote: "The article speculates that the target is Iran's Bushehr nuclear power plant, but there's not much in the way of actual evidence to support that."

“Had it only affected Solaris or GNU/Linux, then surely the press would point this out, so it's just not fair that Microsoft gets a free pass.”Whether Iran was targeted or not, it sure was among those affected. Glyn Moody says in relation to this article about Iran, "30K Windows PCs: might be time to look at GNU/Linux, eh?"

The cyber-attack on Iranian facilities is also covered in the British press [1, 2] and in Slashdot. The MSBBC doesn't mention Windows at all, even though it's exclusively a Windows issue. Had it only affected Solaris or GNU/Linux, then surely the press would point this out, so it's just not fair that Microsoft gets a free pass.

IT Pro (UK) wonders if Stuxnet is "[t]he most serious threat yet"

Stuxnet is something unique, however. It has been causing something of a stir in the security community since it was first spotted by a small company from Belarus named VirusBlokAda.

When Microsoft put out an alert over the virus in July, Stuxnet quickly moved from being a relative unknown to something serious.

Then earlier this month, Stuxnet was observed doing something unprecedented: exploiting four zero-day vulnerabilities at once. It is this advanced capability that has caused such a commotion.


Now that full wiretapping is a hot subject in the United States (read the new article "Surveillance does not make us safe"), one has to wonder if new legislation is needed. When everyone can access almost everyone else's (Windows) computer, surveillance down the wire is no longer a strict requirement. The Hill says that the "NSA chief envisions 'secure zone' on Internet to guard against attacks".

The Pentagon official in charge of the military's cyber unit on Thursday said the government should create a "secure zone" for federal agencies and critical private sector industries to protect them from potential attacks.

General Keith Alexander, who heads the U.S. Cyber Command, told reporters a network sectioned off from the rest of the Internet is probably inevitable for systems crucial to national security.


How about just taking Richard A. Clarke's advice and moving off Windows?

Recent Techrights' Posts

Free University of Bozen-Bolzano Proud to Host Free Software Talk by Richard Stallman
ahead of Monday's talk
Slopwatch: Anti-Linux Machine-Generated FUD (LLM Slop) From GBHackers, CybersecurityNews, and Guardian Digital, Inc (Google News Promotes Slop Plagiarism, Misinformation)
Companies that lie try to drown out the signal with falsehoods
Report About February Mass Layoffs at Microsoft (Third Wave of Microsoft Layoffs in 2025) Comes Back From the Dead
Yesterday we wrote about an article in CRN (reporting Microsoft layoffs) being removed without any reasons specified
Links 21/02/2025: Myanmar Scam Centre and Disruptions at USPTO
Links for the day
 
The Streisand Effect is Real
So don't be evil. Also, don't strangle women.
Links 21/02/2025: Linux Foundation Openwashing, Microsoft Copilot Goes Down
Links for the day
Links 21/02/2025: Doomscrolling and European Ham Radio Show
Links for the day
Links 21/02/2025: TikTok Layoffs, WebOS Software Patents in Bad Hands
Links for the day
Gemini Links 21/02/2025: Web Browsers, Mechanical Shortcuts, and Internet Hygiene
Links for the day
Richard Stallman 'Only' Founded the FSF
there's no reason to be upset at the FSF for keeping their founder in the Board
Techrights Disconnected From the United States Two Years Ago
Did people really need to wait for the US government to become this hostile towards the media before recognising the threat?
Before Trying Censorship by Extortion the Serial Strangler From Microsoft Literally Begged Us to Delete Pages
This is very clearly just a broad campaign of intimidation
Hype Watch: Weeks After Microsoft Disappointed Investors With "Hey Hi" It's Trying Some "Quantum" Hype (Adding Impractical Vapourware to Accompany This Hype and Even LLM Slop in 'News' Clothing)
Remember "metaverse"? What happened to media hype about "blockchain" and "IoT"?
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, February 20, 2025
IRC logs for Thursday, February 20, 2025
gbhackers.com is Not Hackers, It's LLM Slop Outputs (Fake 'Articles') That Attack 'True Hackers'
A site called linuxsecurity.com keeps doing this and now we see the slopfarm gbhackers.com doing the same
Gemini Links 20/02/2025: Law of Warming and Cooling, Health, and Devlog
Links for the day
linuxsecurity.com Continues to Spread Lies or Machine-Generated FUD (Microsoft LLMs Likely the Source) About OpenSSH and Linux
this LLM problem is global
Links 20/02/2025: Microsoft Infosys Layoffs and IRS Layoffs (Good News for Rich Tax Evaders)
Links for the day
IBM Layoffs in Europe Already Happening or Underway (UK and Spain). They Try Not to Call These "Layoffs".
"CIO" in particular was repeatedly mentioned lately, as was Consulting
People Who Came From Microsoft Demanding Removal of Articles About Them, About Microsoft, and About Microsoft GitHub is "Generous" (According to Them)
Imagine choosing a law firm that borrows money in the same year just to avoid overdraft in the bank!
Possibly a Third Round of Mass Layoffs at Microsoft in 2025 ("Cloud Solution Architects, Customer Roles"), Report Removed or Censored
This is literally the top story for "microsoft layoffs" right now
Instead of 'DoS Protection' Cloudflare is Allegedly Conducting 'DoS Attacks' on Users of Browsers Other Than Firefox and GAFAM's DRM Sandboxes (Chrome, Safari and Others)
If you value the Web, you will avoid Cloudflare
Mixing Real With Fake in One 'Article' (by "Director of Content, Help Net Security")
From what we can gather, he got machines to generate some slop for him
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, February 19, 2025
IRC logs for Wednesday, February 19, 2025