Bonum Certa Men Certa

Microsoft Breaks the Web and Linux

Coffee time



Summary: How Microsoft uses 'security' to exclude Web sites and GNU Linux distributions

Microsoft does not comply with the Web. It does not adhere to standards, either. It rejects fine keys and prominent Web folks complain about it.



One writer explains that "[a]s of Oct. 9, 2012, longer key lengths are mandatory for all digital encryption certificates that touch Windows systems.

"That must make Microsoft some new foes.""This means that Internet Explorer will refuse to access websites that do not have RSA keys with minimum lengths of 1024 bits. You won't be able to exchange encrypted emails, run ActiveX controls or install applications on Windows. This isn't new, as Microsoft started making announcements about this well over a year ago."

Then there is this about Microsoft blocking Flash based on a private whitelist: "Yeah you read that right. I just received an interesting email from Brightcove (the video delivery guys) about issues with their Flash based solution and Windows 8 running the new Internet Explorer 10."

That must make Microsoft some new foes.

These things are actually less malicious than plugging proprietary software hooks into Linux to discourage use of Free and open source virtualisation even in GNU/Linux, not to mention UEFI, which Debian agrees is a very malicious move (there is no solution to it yet). Microsoft is knowingly complicating the process of installing GNU/Linux and ways exist for spinning it as benign or beneficial.

James Bottomley, who used to work on some Microsoft stuff on behalf of his former employer Novell (e.g. on Hyper-V), speaks of a new workaround that bloggers try to grasp.

Pogson states correctly that this should not be legal. Stallman agrees. To quote Pogson: "I don’t like any solution that depends on M$. If they can revoke that key, GNU/Linux falls down. They have messed up keys before either deliberately or through incompetence. Someone should sue M$ over this mess. It’s clearly anti-competitive. Also, this doesn’t look like a solution for servers."

Why should anyone be asking Microsoft for permission to use a computer which does not even have Windows?

"Pogson states correctly that this should not be legal."News about it sometimes misses the point, but Varghese writes: "Fifteen days from today, Windows 8 will go on sale; only hardware that is certified to work with this system will be able to boot it, with signed keys being used to determine whether a genuine system is being booted.

"This will put those who boot other operating systems at a disadvantage. Given this, the Linux Foundation has come up with a means of bypassing secure boot to enable users of open source operating systems to continue to boot on hardware certified for Windows 8."

He later criticises this, as he did several times in the past. It is an important issue that even conferences cover. Here is what one UEFI apologist wrote: "The plan for supporting UEFI Secure Boot in Fedora is still pretty much as originally planned, but it's dependent upon building a binary which has the Fedora key embedded, and then getting that binary signed by Microsoft. Easy enough for us to do, but not necessarily practical for smaller distributions. There's a few possible solutions for them."

Techrights' position on this is that UEFI is anticompetitive and antitrust should therefore be pursued. Let is all remind us that there is no reformed Microsoft, it is still the same unethical corporation.

Recent Techrights' Posts

Free University of Bozen-Bolzano Proud to Host Free Software Talk by Richard Stallman
ahead of Monday's talk
Slopwatch: Anti-Linux Machine-Generated FUD (LLM Slop) From GBHackers, CybersecurityNews, and Guardian Digital, Inc (Google News Promotes Slop Plagiarism, Misinformation)
Companies that lie try to drown out the signal with falsehoods
Report About February Mass Layoffs at Microsoft (Third Wave of Microsoft Layoffs in 2025) Comes Back From the Dead
Yesterday we wrote about an article in CRN (reporting Microsoft layoffs) being removed without any reasons specified
Links 21/02/2025: Myanmar Scam Centre and Disruptions at USPTO
Links for the day
 
The Streisand Effect is Real
So don't be evil. Also, don't strangle women.
Links 21/02/2025: Linux Foundation Openwashing, Microsoft Copilot Goes Down
Links for the day
Links 21/02/2025: Doomscrolling and European Ham Radio Show
Links for the day
Links 21/02/2025: TikTok Layoffs, WebOS Software Patents in Bad Hands
Links for the day
Gemini Links 21/02/2025: Web Browsers, Mechanical Shortcuts, and Internet Hygiene
Links for the day
Richard Stallman 'Only' Founded the FSF
there's no reason to be upset at the FSF for keeping their founder in the Board
Techrights Disconnected From the United States Two Years Ago
Did people really need to wait for the US government to become this hostile towards the media before recognising the threat?
Before Trying Censorship by Extortion the Serial Strangler From Microsoft Literally Begged Us to Delete Pages
This is very clearly just a broad campaign of intimidation
Hype Watch: Weeks After Microsoft Disappointed Investors With "Hey Hi" It's Trying Some "Quantum" Hype (Adding Impractical Vapourware to Accompany This Hype and Even LLM Slop in 'News' Clothing)
Remember "metaverse"? What happened to media hype about "blockchain" and "IoT"?
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, February 20, 2025
IRC logs for Thursday, February 20, 2025
gbhackers.com is Not Hackers, It's LLM Slop Outputs (Fake 'Articles') That Attack 'True Hackers'
A site called linuxsecurity.com keeps doing this and now we see the slopfarm gbhackers.com doing the same
Gemini Links 20/02/2025: Law of Warming and Cooling, Health, and Devlog
Links for the day
linuxsecurity.com Continues to Spread Lies or Machine-Generated FUD (Microsoft LLMs Likely the Source) About OpenSSH and Linux
this LLM problem is global
Links 20/02/2025: Microsoft Infosys Layoffs and IRS Layoffs (Good News for Rich Tax Evaders)
Links for the day
IBM Layoffs in Europe Already Happening or Underway (UK and Spain). They Try Not to Call These "Layoffs".
"CIO" in particular was repeatedly mentioned lately, as was Consulting
People Who Came From Microsoft Demanding Removal of Articles About Them, About Microsoft, and About Microsoft GitHub is "Generous" (According to Them)
Imagine choosing a law firm that borrows money in the same year just to avoid overdraft in the bank!
Possibly a Third Round of Mass Layoffs at Microsoft in 2025 ("Cloud Solution Architects, Customer Roles"), Report Removed or Censored
This is literally the top story for "microsoft layoffs" right now
Instead of 'DoS Protection' Cloudflare is Allegedly Conducting 'DoS Attacks' on Users of Browsers Other Than Firefox and GAFAM's DRM Sandboxes (Chrome, Safari and Others)
If you value the Web, you will avoid Cloudflare
Mixing Real With Fake in One 'Article' (by "Director of Content, Help Net Security")
From what we can gather, he got machines to generate some slop for him
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, February 19, 2025
IRC logs for Wednesday, February 19, 2025