Bonum Certa Men Certa

Microsoft Attempting to Destroy the Careers of Its Critics, Including Free Software Proponents

Cult-like tactics. Or doxing to secure bug doors. Is this what "business intelligence" was all along for?

Microsoft bullying



Summary: Microsoft isn't changing and has not changed; the tactics described above are still being used, even by its "Open Source" (or "Open at Microsoft") people, who did this to me

IT IS a small world after all. Someone in the Fediverse pointed out to me this new tweet about Microsoft bullying, which reminded me of these cult-like tactics Microsoft used against myself and others. From the original thread (there are also many comments in there):



I think you must be talking about CVE-2010-0232, it wasn't 90 days, it was more like 180. This was at a time when Microsoft refused to release kernel patches outside of service packs. I begged Microsoft at multiple in-person meetings at Redmond to reconsider and patch, they simply refused and said there were would be repercussions if I disobeyed. After four months of negotiations, I told that I'm going to publish it whether a patch was available or not. This didn't have the effect I had hoped, they started threatening me instead. They called me and told me my career would be destroyed. In one particularly memorable call they told me that their PR and legal department only had two settings, "off and destroy" and (in a rather menacing tone) that they would "air my dirty laundry in public". I still don't know what that means.

I was shaken, but told them I'm still going ahead. They responded by calling everyone they knew at my employer demanding I was terminated.

There was a trivial mitigation, just disabling a very rarely used feature (vdm support for 16 bit applications). I made detailed documentation explaining how to enable the mitigation for every supported platform, and even made tutorial videos for Administrators on how to apply and deploy group policy settings.

Here are the instructions I wrote:

https://seclists.org/fulldisclosure/2010/Jan/341

And here's a video I made showing how to apply the policy to a Windows Server 2003 machine like yours:

http://www.youtube.com/watch?v=XRVI4iQ2Nug

I sent these detailed instructions to all the usual places that advisories are published. I included a test case so you could verify if the bug affected you and verify the mitigation was correctly deployed. As you can imagine, Microsoft were furious.

I know it's little comfort, but through some hard fought battles over the last decade we have reached the point that Microsoft can reluctantly patch critical kernel security bugs if given around three months notice. They still pull some dirty tricks to this day, you wouldn't believe some of the stories I could tell you, but those are war stories for sharing over beers :)

It sounds like your attackers compromised you with an outdated wordpress installation, then gained privileges with this vulnerability. I'm not sure I agree the blame here lies solely with me, but regardless, I would recommend subscribing to the announce lists for the software you're deploying. You could also monitor the major security lists for advisories related to the software you use. It's high volume and varies in quality, but you can usually identify the advisories that apply to you easily.


We've documented many examples like it for over a decade (we've lost count!) and we have some wiki indexes for these. Incidentally, we've just added the "Librethreat Database", contributed by an anonymous reader who is also a software developer working on GNU/Linux.

It's very important to understand what Microsoft is up to; it's not a friend, it's just getting closer for the purpose of causing damage (from the inside). Earlier this month Dina Bass wrote a widely-syndicated (dozes of news sites) piece pretending that Microsoft was reaching peace and had already appeased its biggest critics. It's a lie, but if the media keeps repeating this lie, then more and more people will believe it. To appease the Linux Foundation and OSI Microsoft just had to dump some money of them; that's not about trust, it's about corrupting people using money -- not the same thing!

"Dina is on one," Mitchel Lewis told us about this new tweet from Dina Bass. "She’s like their top 5 shill right now."

"It's very important to understand what Microsoft is up to; it's not a friend, it's just getting closer for the purpose of causing damage (from the inside)."Notice Mitchel Lewis responding to her Microsoft revisionism and white-washing. She has long worked as Microsoft's de facto PR person, as we noted here before. She's a "media insider", just like Microsoft Peter. Several of our readers and active members theorised that Microsoft had long known about his pedophilia (he raped children) and used that to control him; we lack evidence to show/prove this, so we never entertained that angle. Some people urged us to explore that angle, but we never did. Someone told us a story to that effect involving a relative who had worked at Microsoft (and Microsoft used sexual means to manipulate him). Mr. Lewis said so himself and his claim is supported by what people told us over E-mail and IRC. This seems to be an unreported or grossly underreported issue that may or may not relate to manipulation of people through Code of Conduct, NDAs and so on. Mr. Lewis has meanwhile just published "Digital Oxy", comparing Microsoft's tactics to those of "legalised" drug dealing. It's part of his ongoing series of articles exposing the true nature of the Microsoft monopoly -- a subject he understands as a former insider:

Despite maintaining a portfolio of aging products that have never been as complex, buggy, vulnerable, or costly to manage as they are today, IT professionals around the world maintain that Microsoft products remain the best in their class. To their credit, Microsoft is the largest company in the world when measured by market cap, the prevalence of their products is undeniable, and Windows is still the de facto gaming platform, so it’s easy to see why so many are under this impression. But market cap, prevalence, and gaming are not the measures of all things and a different narrative immediately becomes apparent when relying on metrics that actually take consumer and business welfare into account to determine which is the best.

Case in point and despite their prevalence or market cap, one would have to scrape the proverbial barrel in order to find a metric that favors Microsoft mainstays relative to their competition when evaluating them based on metrics emphasizing on business welfare that prioritize quality, productivity, simplicity, security, supportability, etc. This is so much the case that, IBM, the inventor of PCs, noticed a reduction in ownership costs to 1/3 that of Windows PC users by migrating users to the Apple ecosystem; which is significant amount of disparity in an industry where even a 1% savings will make executives randy.

[...]

Although many interpret the present complex, buggy, vulnerable, and costly state of Microsoft solutions as the product of ignorance and apathy, these aren’t the actions of a firm ignorant to software engineering best practices. It actually requires a high-level understanding of software to engineer it for entrenchment, dependence, and lock-in, let alone build an extensive partner network to distribute it through and Microsoft’s market performance is a testament to this, not an exception.

No differently than Purdue Pharmaceutical being dependent on a network of profiteering drug dealers masquerading as doctors, it seems as if Microsoft is dependent on a conflicted network of maladapted experts entrenching their own products throughout industry just the same. When combining such a conflict of interest with products streamlined for entrenchment in a woefully under-regulated industry, Microsoft’s success, the prevalence of Windows, and their staying power throughout industry instantly becomes much more palpable and markedly less ethical.


We can warmheartedly recommend his other writings, which we sometimes cite.

Don't believe that because Microsoft changed (yet again) its logo and CEO it means different tactics and intents. Bill Gates is still in charge of Nadella and can fire him at any time (through the Board). The same people are in charge and they're still ruthless and manipulative. The software and services are technically shoddy, but we prefer focusing on ethics.

Recent Techrights' Posts

Linux Months-Old News (LWN Uncorrected)
They could at least update the original
This Week Fedora Celebrates Diversity, But It is Pushing Proprietary Software and Censorship
IBM openwashing, perception management, and reputation laundering gone awry?
EU 'Chat Control' Law is Already Discrediting the Stated Goals of GDPR
Equip kids with always-on always-connected microphones and double-sided cameras, just to be safe...
 
Links 20/06/2024: Bruce Schneier Adds Moderation Policy, FUCKSHITUP Can't Be Trademarked in the US
Links for the day
Mass Layoffs Happening in IBM Subsidiaries, Almost No Media Exists Anymore (to Cover That)
They can drive people out with R.T.O. of lay off in small batches to prevent any media scrutiny
Links 20/06/2024: Trying to Maintain Health and the Implosion of LLM Bubble/Hype
Links for the day
Microsoft's Bing Share in Canada Has Only Decreased Since the LLM Hype ("Bing Chat")
According to statCounter
Gemini Links 20/06/2024: Golden Ticket and Looking for Web 1.0 Communities
Links for the day
Not Even TRYING to Compete With Microsoft
CMA (UK) ought to step in and investigate why Canonical (UK) refuses to even compete
Poul-Henning Kamp: Why Freedom in 'FOSS' Matters
Openwashing is more widely recognised as a growing problem
[Meme] EU Chat Control: The Problem is Too Much Privacy???
So what's with GDPR then? The EU is contradicting itself!
Lithuania: GNU/Linux Usage Climbs to Highest Level in Years
consistent abandonment of Microsoft
"Remarkably Little Had Changed."
Black or African American not even mentioned
Rumours That Nat Friedman (CEO) Was 'Fired' by GitHub/Microsoft
"Microsoft Refused to Fix Flaw Years Before SolarWinds Hack"
linuxsecurity.com: A Step in a Positive Direction
We hope that Guardian Digital and linuxsecurity.com will rectify the matter and persist with real articles
Links 20/06/2024: Somali Piracy Surges, Juneteenth Discussed
Links for the day
Gemini Links 20/06/2024: Gemini is 5 Today (Still No Gemlog Entry From its Founder)
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Wednesday, June 19, 2024
IRC logs for Wednesday, June 19, 2024
Morocco: GNU/Linux Surges From 0.1% to 4.21%
Microsoft has mass layoffs in Africa these days
[Meme] EU Chat Control II
Stuff like "Chat Control" means that GDPR will lose credibility and the true motives be rightly scrutinised/questioned
You're Only Proving Our Point, Sir
clearly obsessed with what we write
Just Because It Happened Over 20 Years Ago Doesn't Mean It's "Old News" or Stopped Happening
This strategy merely evolved
Thanking Solderpunk for 5 Years of Gemini Protocol
Long live Gemini Protocol and long live Solderpunk!
[Meme] He Who Controls the Boot
And licks the Microsoft boot
[Meme] systemd-recovery
Imagine "Linux" (Poetterix) becoming so unreliable that it needs factory resets
Almost Every Day This Month the GNU/Linux "Market Share" Grows in statCounter
Advocates like to see progress
Dawg, I Herd You Like Freedom
In the context of Software Freedom, little is ever said about free speech
Links 19/06/2024: Microsoft Faces Big Backlash, Bytedance Referred to US Department of Justice
Links for the day
Gemini Protocol Turns 5 in 15 Hours
Geminispace is still very much alive
OSI's Blog is Still 100% "AI" Nonsense Sponsored by Microsoft (the Authors Are Also Salaried by Microsoft)
The founder of the OSI no longer supports the OSI
Poland is Another Country Where Bing Lost a Lot of Market Share Since the LLM Gimmicks
down from 3.24% to 2.4%
Jean-Pierre Giraud, Possible Forgeries & Debian: elections, judgments, trademark already canceled, archaeologist
Reprinted with permission from Daniel Pocock
It Took Microsoft More Than 3 Years to Get a Quarter of Windows Users to 'Upgrade' to Vista 11 (3 Out of 4 Windows Users Still Reject It)
That is exactly what's happening right now
[Meme] The Empire
Don't be like Putin
They Want 'Transparency' Only for the General Public (Every Bit of Communication Available to the Government, Usually Via Corporations)
The EU might decide to effectively ban SSH
Justices Jeremy Johnson and Victoria Sharp to Decide the Fate of Julian Assange in About Three Weeks
Will he be back home in Australia by year's end?
Free Software Won't Fix Equality, But It Helps
Let's examine Free software in the context of: 1) money. 2) justice.
Treating Them as Teammates, Not as Political Props, Trophies, or Objects
Most of the world's people are women
Links 19/06/2024: SFTP and Gopher Milestone
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, June 18, 2024
IRC logs for Tuesday, June 18, 2024
US Surgeon General's Advice on Social Control Media (and "Smart" Phones) Seems Reasonable
People forget what the real world is about
Quiet at Planet Debian
planet.debian.org has not had any updates since 5 days ago
Belarus: Bing Fell From 1.1% to 0.6% Since Microsoft Started the LLM Hype (Yandex is 50 Times Bigger Than Bing)
Now enter Belarus
Morale at Microsoft Sinks to New Lows
The annual 'Employee Signals' survey showed a drop from 69% to 62% in positive responses
Microsoft Windows is Being Abandoned in the UK, Relative to Other Platforms (New All-Time Lows)
Windows at new lows
Links 18/06/2024: More Executives Leave Microsoft, Attacks on the Press in Russia and 'Exile'
Links for the day
[Meme] Always Livecasting
Wait Till Systemd-Recall
Australia: Bing Lost Market Share Since the LLM Hype ("Bing Chat")
Google rose, Bing went down
Gemini Links 18/06/2024: Unconscious Consumption and Firewall Autoban
Links for the day
[Meme] Canonical Has Basically Become Novell II
Today's Canonical...
While Everyone is Furious at Vista 11 (Over TPM, Recall and Other Malicious 'Features') Canonical is Selling It to People
So the only thing Canonical says about Windows is that you should give it a try?
Links 18/06/2024: Adobe and Internet Archive in Trouble
Links for the day
Peter Duffy Explains SystemD
Ein Volk, Ein Reich, Ein Führer!
[Meme] The Doyen and the Colonel
EPO continues to prioritise lawbreaking over knowledge
EPO Union Action: Next Week SUEPO The Hague and SUEPO Munich Talk About New Pension Scheme (NPS) and Salary Savings Plan (SSP)
So there are basically 32 days left for more people to intervene
[Meme] Wait Till Systemd-Recall
The only thing Linux still needs is a forensics backdoor
GNU/Linux Up This Month in India (or Why Famous Criminal Bill Gates Keeps Visiting Modi)
truth tends to catch up with people
Microsoft Poetterix is Work in Progress
Linux's New DRM Panic 'Blue Screen of Death' In Action
24/7 Work Discipline
it's not so much about how much (or how long) one works, it's about how one works and whether one feels comfortable doing it
Adamant Conformism is an Enemy of Science
"The reasonable man adapts himself to the world; the unreasonable one persists in trying to adapt the world to himself. Therefore, all progress depends on the unreasonable man"
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, June 17, 2024
IRC logs for Monday, June 17, 2024
Links 18/06/2024: Further Mass Layoffs and Gemini Leftovers
Links for the day
At IBM, "Brownnosing is the Norm."
Many of these comments are from IBM insiders
Myanmar/Burma: Google Gains One Percent, Microsoft Loses One Percent Since the LLM Hype ('Bing Chat')
it's not hard to understand LLMs didn't replace real search and didn't replace Google, either
[Meme] KISS, not SAAS
Gemini Protocol turns 5 in exactly 2 days
Hostageware: The Threat of Clown Computing (or 'SaaS', Another Misnomer or Buzzword) to Computer Users Everywhere
This problem isn't limited to Free software adopters