Bonum Certa Men Certa

Don't Host GNU/Linux Under Hyper-V or Windows; There Are Back Doors

Azure



Summary: Reminder that Microsoft's proprietary hosting environments have got holes in them, facilitating access even to guests (irrespective of the operating system)

ONE THING we know for sure, especially owing to Edward Snowden's leaks, is that Microsoft and the NSA are two heads of the same hydra (one is privately-owned).



This morning we explained that Windows gets the latest back doors, whereas GNU/Linux gets endorsement from the British government (for internal use), so why would anyone want to make GNU/Linux dependent on (or a guest under) Windows hosts? Putting GNU/Linux on Azure is bad enough, but the same goes for hosting GNU/Linux as a virtual machine under Windows (a Trojan horse for the NSA), especially with Hyper-V (which is proprietary). According to [1], there are now vulnerabilities (read: back doors) in Hyper-V, so even the guests are being compromised (through the host). The same back doors that the NSA puts in Microsoft products (with Microsoft's help) may turn out to be exploited by non-state actors [2], based on an example Bruce Schneier gave today.

There are other cases where anything from Microsoft should be strongly avoided. Cars are increasingly becoming surveillance devices [3], especially ones with Microsoft inside (instead of Linux inside) and we know this because of Microsoft's connection to Ford and Ford's own position on surveillance.

In short, those who value privacy should avoid everything from Microsoft, including the surveillance device which is Xbox (chat, camera, et cetera) and malware called Skype. When you use something from Microsoft you should assume to be under surveillance. Evidence provided by Edward Snowden should reassure you that you're not being "paranoid".

Related/contextual items from the news:



  1. Whodunit: A Hyper-V failure may reveal fabled 'escape attack'


  2. Cell Phone Tracking by Non-State Actors


  3. 10 security, privacy issues you might not know about your car’s auto-location services
    As cars become more wired to the Internet and other communications services, the threat that your personal information and privacy could be exploited goes up exponentially.

    You can understand the concerns since at least one study from Frost & Sullivan found that the market for telematics services provided by auto manufacturers in North America is expected to increase from 11.8 million subscribers in 2012 to 31.6 million in 2016.


Recent Techrights' Posts

Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, November 23, 2024
IRC logs for Saturday, November 23, 2024
[Meme] GAFAMfox
Mozilla Firefox in a state of extreme distress
Google Can Kill Mozilla Any Time It Wants
That gives Google far too much power over its rival... There are already many sites that refuse to work with Firefox or explicitly say Firefox isn't supported
Free (as in Freedom) Software Helps Tackle the Software Liability Issue, It Lets Users Exercise Greater Control Over Programs
Microsofters have been trying to ban or exclude Free software
In the US, Patent Laws Are Up for Sale
This problem is a lot bigger than just patents
ESET Finds Rootkits, Does Not Explain How They Get Installed, Media Says It Means "Previously Unknown Linux Backdoors" (Useful Distraction From CALEA and CALEA2)
FUD watch
Techdirt Loses Its Objectivity in Pursuit of Money
The more concerning aspects are coverage of GAFAM and Microsoft in particular
Techrights' Statement on Code of Censorship (CoC) and Kent Overstreet: This Was the Real Purpose of Censorship Agreements All Along
Bombing people is OK (if you sponsor the key organisations), opposing bombings is not (a CoC in a nutshell)
Links 23/11/2024: Press Sold to Vultures, New LLM Blunders
Links for the day
Links 23/11/2024: "Relationship with Oneself" and Yretek.com is Back
Links for the day
Links 23/11/2024: "Real World" Cracked and UK Online Safety Act is Law
Links for the day
Links 23/11/2024: Celebrating Proprietary Bluesky (False Choice, Same Issues) and Software Patents Squashed
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, November 22, 2024
IRC logs for Friday, November 22, 2024
Gemini Links 23/11/2024: 150 Day Streak in Duolingo and ICBMs
Links for the day
Links 22/11/2024: Dynamic Pricing Practice and Monopoly Abuses
Links for the day
Topics We Lacked Time to Cover
Due to a Microsoft event (an annual malware fest for lobbying and marketing purposes) there was also a lot of Microsoft propaganda
Microsofters Try to Defund the Free Software Foundation (by Attacking Its Founder This Week) and They Tell People to Instead Give Money to Microsoft Front Groups
Microsoft people try to outspend their critics and harass them
[Meme] EPO for the Kids' Future (or Lack of It)
Patents can last two decades and grow with (or catch up with) the kids
EPO Education: Workers Resort to Legal Actions (Many Cases) Against the Administration
At the moment the casualties of EPO corruption include the EPO's own staff
Gemini Links 22/11/2024: ChromeOS, Search Engines, Regular Expressions
Links for the day
This Month is the 11th Month of This Year With Mass Layoffs at Microsoft (So Far It's Happening Every Month This Year, More Announced Hours Ago)
Now they even admit it
Links 22/11/2024: Software Patents Squashed, Russia Starts Using ICBMs
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Thursday, November 21, 2024
IRC logs for Thursday, November 21, 2024