Bonum Certa Men Certa

Symantec Deserves a Ban in China for Not Reporting US Government Back Doors

Tick the box to ban

Symantec logo



Summary: Symantec, a Windows insecurity firm, is miserably trying to divert attention away from reports about distrust that led to a ban in China

According to many reports this week [1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16], China does not trust some US- and Russia-based companies to take care of 'security' in China. It's about time.



Reports focus on two firms, but another one is seemingly affected (Symantec). While Kaspersky (which we occasionally mention here) does not deny the claims, Symantec does strike back and "Says its Products are Still Allowed in China". This is a cleverly-worded denial. Some products are definitely banned, but the "Security software developer Symantec Corporation denied its software has been banned in China." Symantec merely says or emphasises that not everything is banned.

Just to be more specific: "It is important to note that this list is only for certain types of procurement and Symantec products are not banned by the Chinese government."

Kaspersky is hyping up security threats at the moment and Symantec is trying hard to dodge the negative publicity because trust is fundamental to their sales. Symantec, which has strong Microsoft connections and disdain for FOSS, should not be trusted if China does not trust Microsoft (we already know how China feels about the 'new' Microsoft). To quote an IDG report:

Symantec and Kaspersky Lab have become the latest tech firms to be kicked off the Chinese Government's approved list, according to an unconfirmed report in the country's media.

The People's Daily newspaper broke the news at the weekend in a report that claimed that local supplies including Qihoo 360, Venustech, CAJinchen, Beijing Jiangmin and Rising would from now on be the preferred software for antivirus duties.

The news seems to have surprised both firms, which have until now have been approved suppliers for desktop security.


Symantec has been overlooking government back doors such as the ones Microsoft puts in place and lets the US government know about. This is an older debate which made a comeback amid NSA leaks (other antivirus makers seemingly exempt government malware and such, e.g. Stuxnet). Here is Wall Street's press coverage:

That’s a lesson that Microsoft and Symantec are learning right now. An antivirus company from Silicon Valley, Symantec competes in China against local favorites like Beijing-based Qihoo 360 Technology. According to reports by Bloomberg News and the Chinese media, China has instructed government departments to stop buying antivirus software by Symantec and its Moscow-based rival, Kaspersky Lab. Symantec software has backdoors that could allow outside access, according to an order from the Public Security Ministry. Not coincidentally, Qihoo’s New York-traded shares rose 2.7 percent yesterday, following reports of the move against Symantec and Kapersky.


Well, good for them. After being cracked by the NSA they need to secure their systems by better identifying possible moles (in the software sense).

Dan Goodin, who typically slams FOSS over security issues (less severe than in proprietary software), finally writes about Microsoft's best known back doors that it tells the NSA about (Goodin does not mention the NSA connection):

There's a trivial way for drive-by exploit developers to bypass the security sandbox in almost all versions of Internet Explorer, and Microsoft says it has no immediate plans to fix it, according to researchers from Hewlett-Packard.

The exploit technique, laid out in a blog post published Thursday, significantly lowers the bar for attacks that surreptitiously install malware on end-user computers. Sandboxes like those included in IE and Google Chrome effectively require attackers to devise two exploits, one that pierces the sandbox and the other that targets a flaw in some other part of the browser. Having a reliable way to clear the first hurdle drastically lessens the burden of developing sophisticated attacks.


What can Symantec do to stop this other than suggest abandoning Windows (its bread and butter)? Symantec must have known about back doors in the form of IE vulnerabilities, but did it properly protect China from it? No, Symantec makes money from the prevalence of Windows and the company's management is deeply connected to Microsoft's.

Recent Techrights' Posts

How the EPO Pressures Staff Into Minting More Monopolies (Patents), Even Illegal Ones That Harm Europe and Ultimately Dismantle the Rule of Law
insights into the pressure examiners are under
LLM Slop Machines Are Not a Win for "Open Source" and If They Get Cheaper, It's Even Worse
If some program that claims to be "Open Source" pollutes the Web with fake articles (Microsoft SPAM and fake "Linux" articles), whose win is it?
Richard Stallman Speech in Bengaluru, "Silicon Valley of India"
62 years have passed since his "young nerd" days and he's still at it
More Illegal Patents at the EPO, Legality of Granted European Patents No Longer Matters to the Office
breaking the law for profit
Sharing is Caring (But Advocating Copyleft Makes You a "Target")
GPLv3 does not close all the loopholes which the "Affero" helps close
"Latest Technology News" in BetaNews Still LLM Slop and SPAM Composed by LLMs (It's Basically a Spamfarm Disguised as a News Site)
Only a fool would visit BetaNews in search of actual news
Over at Tux Machines...
GNU/Linux news for the past day
The EPO's Corruption, If It Remains Untackled, Helps the Far Right and Enemies of European Unity/Solidarity
Do not negotiate with evil
The Web, Including Wikipedia, Gets Filled With Lies About Bill Gates, Added by Bill Gates and His PR Team
Of course Wikipedia is funded by Gates
 
Certificate Authority Let's Encrypt Falls to Only 0.4% of the Total in Geminispace
Geminispace does not need to outsource trust
The Munich-Based EPO is Still Using a Platform That Promotes the Far Right and Rehabilitates Nazism
Active Twitter account
Links 29/01/2025: Dismantling Public Health in the US, Air Busan Plane Up in Flames (South Korea's Air Disasters Streak)
Links for the day
Announcements and Administrivia
This week we're going out for two days in a row to celebrate an achievement that's very respectable
Gemini Links 29/01/2025: Japan, GTD, and More
Links for the day
Sir, Yes, Sir. The Life of EPO Patent Examiners.
If working for the EPO makes it harder to sleep at night, take action
Links 29/01/2025: Data Privacy Day and Growing Tensions in Europe
Links for the day
Nazi Twitter (aka "X") Became a Troll Site That Lets People Buy a Blue Tick While Its Boss Actively Promotes Neonazi Politicians
the intellectual level of people who infest the Web through "Twitter" or "X"
This is Why They're So Afraid of Richard Stallman (He Tells People the Correct History)
Then they post about it to Microsoft's LinkedIn
Claim: Facebook Deletes Posts of IBM Red Hat Critics
As always, follow the money (advertisers)
Links 29/01/2025: Climate Crisis and "It’s time for the Xbox to fade away" (Microsoft Lose)
Links for the day
Links 29/01/2025: Buying Groceries During a Trade War, Political 'Retro'
Links for the day
Network Improvements Tomorrow
"Network maintenance" down in London
Articles About Free Speech at Facebook
'Facebook vs Linux' story is now receiving a lot more media coverage
We Were Right About stallmansupport.org Making an Error by Joining Social Control Media. mastodon.social Suspends stallmansupport.org.
From what we can guess, accounts can be banned by some oversensitive admin or a mob of users ("bury brigades")
IRC Proceedings: Tuesday, January 28, 2025
IRC logs for Tuesday, January 28, 2025
Facebook Banning Linux Sites (or People Who Link to Linux Sites) is Another Symptom of the Web's Demise
The state of media on the Web is really bad; Social Control Media amplifies the badness, as Facebook serves to show
Gemini Links 29/01/2025: Neovim Telescope and Writing Less
Links for the day
Links 28/01/2025: Chaffbot as Commodity Fad, New Import Restrictions in Thailand
Links for the day
Links 28/01/2025: "Against Social [Control] Media", "Smart" Buses' Ticketing System Cracked
Links for the day
[Video] Richard Matthew Stallman (RMS) in India, Talking About Proprietary Software's Dangers Only Yesterday
WebM file
Gemini Links 28/01/2025: Thinking About Not Much, Computing Fatigue, the Curse of JavaScript
Links for the day
"SuccessFactors" (SAP) Stunts at the EPO Used to Break Laws and Constitutions, Staff Tricked Into Harming Themselves
Ongoing corruption and lawlessness became the norm; Europe's second-largest institution (EPO) along with the largest institution (EU) has its very own Minsk
The GNU Manifesto Turns 40 in a Few Weeks
The FSF turns 40 later this year, too
Continued Support and Momentum at the Free Software Foundation (FSF)
"This helps protect our community."
Another Talk by Richard Stallman Tomorrow, This Time in Bengaluru
This means that in January 2025 he is giving at least 5 public talks
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, January 27, 2025
IRC logs for Monday, January 27, 2025
Links 27/01/2025: Lukashenko's Sham Elections, TikTok for Insurrection Loyalist (Larry Ellison)?
Links for the day
Gemini Links 27/01/2025: IndieWeb Musings and Devlog
Links for the day
IBM Layoffs in "Co-location Mandate" Clothing
It's possible that later this week, around the time of the so-called 'results', many layoffs would be announced
Microsoft-Funded IDG Seems to be 'Googlebombing' the Term Free Software to Promote Proprietary Spyware Too
Microsoft advocated along with other proprietary things
Videos and Photos of Richard Stallman's (RMS) Keynote Address in India Earlier Today
He probably told the target audience (India) a thing or two about the role of proprietary software in colonialism
Rhino Linux Can (and Perhaps Should) Promote Alternatives to Microsoft Instead of Preloading Microsoft
Deeper down inside Rhino Linux there's a problem
GAFAM Hates - Except in a Worryingly Parasitic Way - GNU/Linux and Its Freedoms (or Its Users)
Let the story from DistroWatch serve as a reminder that the era of Social Control Media is over
Links 27/01/2025: Social Control Media Explores Propaganda for Racism as a Business Model, China’s Tibet Dam Criticised
Links for the day
Slashdot is Once Again Publishing Lies and Revisionism for Bill Gates, Citing Microsoft's MSN to Rewrite History and Distract From the Jeffrey Epstein Crimes
Of course this also distracts
Too Big, Will Fail (How Linux Grew Way Too Fat)
Linux has very extensive hardware support, but that comes at a cost
Richard Stallman Gives Keynote Address in a Few Hours
Richard Stallman's personal site was updated to give more details
Microsoft Relegated by Manchester United
No Microsoft
IBM Layoffs in 2025: Rumours Say Even Managers Will Get the Axe, Some Via Loopholes Like PIP and/or RTO (Preparations Already Underway)
Where does IBM's money go?
FOSDEM Talks Are Vanishing
They no longer seem to be taking money from Microsoft and/or its tentacles
Gemini Links 27/01/2025: Mental Locomotion, Gemini Protocol Bots From China, and Domain-Specific Languages
Links for the day
Microsoft Still Hires Journalists to Reward Them (Belated Payment) for Microsoft Propaganda
The PR/lying pipeline
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, January 26, 2025
IRC logs for Sunday, January 26, 2025