Bonum Certa Men Certa

Don't Fall for Microsoft's Spin That Says Everything is Not Secure and Cannot be Secured

Video download link | md5sum a65470ffecd44d127e6ee8d7b95f2448 Security Defeatism Creative Commons Attribution-No Derivative Works 4.0



Summary: Microsoft keeps promoting the utterly false concept that everything is not secure and there's nothing that can be done about it (hence, might as well stay with Windows, whose insecurity is even intentional)

EARLIER this month we published "2022 Commences With Microsoft-Themed (and Microsoft-Connected) FUD Against GNU/Linux" and "White House Asking Proprietary Software Companies That Add NSA Back Doors About Their Views on ‘Open Source’ Security". The general theme in the media is, piggybacking the Apache bug from last month, Free software isn't secure and there's nothing to do about this because it's all about money. This past week we saw some newer FUD, capitalising on a bug report concerning some Web-based panel and systemd. Those are not "Linux" issues per se, but Microsoft-friendly media calls everything "Linux" when it suits the negative image. Examples from the past week can be found here and here (we don't want to link to them directly, giving liars traffic they do not deserve).



"Building perfectly secure systems is perfectly possible, but that typically involves stripping things down, going back to basics, just like in Gemini."In the video above I explain what a recent conversation with Richard Stallman was like, after he had basically read this claim: "Do not be fooled into accepting false claims about “security updates”. It is perfectly possible to write software that is secure from the get-go. However, it is expensive to do that. It cuts into profit. Secure software can also protect its owner from the vendor. There is an unspoken conflict of interests in all discussions around cyber-security. Big companies ship insecure software not because they are stupid, but because they intend to. They are lazy, tight and dishonest."

Building perfectly secure systems is perfectly possible, but that typically involves stripping things down, going back to basics, just like in Gemini. Sadly, projects such as GCC and Linux have become so unbelievably bloated (even LibreOffice would be shy) that no wonder they're full of defects/bugs, some of which impacting security directly and indirectly.

"Exploit codes of the NSA sometimes leak out, causing chaos and shutting down whole hospitals which rely on Windows."Can we do better than that? We can. In the video above I show some GNU programs (not “Linux commands” as pundits like to call them) and some of them from Stallman himself. These barely pose any security risks, until or unless they're plugged into bloated Linux with a network stack and loads of firmware blobs, including some that are necessary for networking to work. Much can be done about this sordid mess and there are operating systems that pour money into studying the paths of execution almost exhaustively, compacting, refactoring, optimising and perfecting code instead of just throwing more and more code into a Git repository.

This ludicrous idea that everything in computers/computing isn't secure and security is an impossibility (defeatism) overlooks the real issue, such as deliberate back doors in Microsoft's product. Exploit codes of the NSA sometimes leak out, causing chaos and shutting down whole hospitals which rely on Windows. This is the sort of debate the White House should be focusing on, but it shies away from debating its astonishingly stupid demands for back doors. Rigged or stacked panels distract from facts and flawed, shoddy products have become the norm.

Recent Techrights' Posts

Linux Foundation Says "Housekeeping", "Hung", "Normal", "Native Feature/Support" and "Girl/Girls" Are Offensive Words
Bombing people is OK, just use the right "terms"
It Looks More Like Microsoft GitHub Layoffs
GitHub is just losing loads of money
 
Links 12/08/2025: Science, Hardware, and Ukraine Excluded From Negotiations About Its Future
Links for the day
GitHub the Company Has, in Effect, Just Died (Time to Look for Alternatives)
To Microsoft, what's left of GitHub after dismantling/folding it is some "training set" (people's code, without permission to "train" i.e. misuse under the guise of "GenAI" plagiarism)
Gemini Links 12/08/2025: Meditation, OpenStreetMap, Smolweb, and More
Links for the day
Google News is Dying: Most of Its Top Stories Now Are LLM Slop With Slop Images (i.e. 100% Fake 'Content')
Google News has been drowning in this sort of stuff for quite some time
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, August 11, 2025
IRC logs for Monday, August 11, 2025
Our Predictions Were Right: GitHub Dying as Losses Pile Up (as a Company It Cannot Continue to Exist, It's Not 'Free Hosting')
GitHub always lost money
Links 11/08/2025: Meritless Twitter Suspensions and Disney Scraps Deepfake Dwayne Johnson
Links for the day
Gemini Links 11/08/2025: Upgrading Debian Bookworm and Better Quality PDFs From Gemini Pages
Links for the day
Currys PCWorld Lied a Decade Ago, 10 Years Later It Still Effectively Voids Your Warranty for Installing GNU/Linux Despite It Being Increasingly Mainstream
Microsoft gatekeepers
Team GNOME Has Libeled Me for Nearly 20 Years
we are not dealing with sane people
Experience With Airlines in 'Web Sites' and in 'Apps'
In a lot of ways, Stallman Was Right about what JavaScript would turn out to be
Open Does Not Mean Free
wiser to ask if some program is freedom-respecting
The Register MS Takes Money From Companies Banned by the Biden and Trump Administrations (National Security Risk)
today's sponsor
Sabotaging GNU/Linux PCs (and Users) is Not a 'Joke'
maybe cruelty is the very objective
How We Process Screenshots of Slop to Suitably Tag Them as Slop
everything is a single command
Links 11/08/2025: Data Breaches, Politics, and Climate
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, August 10, 2025
IRC logs for Sunday, August 10, 2025
Gemini Links 11/08/2025: Tea Caffeine Hot and Super ZZ Zero
Links for the day
Slopwatch: LinuxSecurity, Brian Fagioli, and Other Serial Sloppers
Maybe Microsoft wants to dub this "Web5"
Gemini Links 10/08/2025: Residents Management Company, Automation, and Politics
Links for the day
Links 10/08/2025: AOL Ending Dial-up
Links for the day
Seductive Mirage or Allure of Complex, Proprietary Coffee Machines (or Similar White Elephants)
Software is a lot like those things
Links 10/08/2025: Webrings, “AI Sunglasses” and “AI Eyeglasses”, US Administration Intensifies Attacks on Science and Research
Links for the day
Sometimes Newer is Worse
We generally need to reject this dumb notion that "old" means bad
The Code Used to Make Techrights Fits on a Seventh of a Floppy Disk (or 100KB When Compressed)
For the sake of comparison I've just downloaded the latest version of WordPress. The ZIP file is 27.2MB in size, or ~27,200KB.
What They Tell Young Programmers
Coding in 2025
Simpler is Better When Simple is Enough
Over-complicating things to "sell" new versions is so 1990s
Links 10/08/2025: From Social Control Media to Prison, New Examples of Windows TCO
Links for the day
Sloppy Reporting About Slop, or How The Register MS Lowers Its Standards
Maybe the management isn't even aware of this
IBM's Strategy: Cull 'Expensive' Workers, Replace Them With Cheaper Ones
So far we saw not even one rebuttal or challenge to the claim of Red Hat layoffs scheduled for tomorrow
If You Attack Somebody Too Much You Legitimise and Strengthen That Somebody
at the end those attacks add up to a "martyr" status
The Man Who Helped Microsoft Kill Linux is Trying to Delay Our Lawsuits Against Him
By conservative estimates, and based on court documents submitted by them, they're prepared to spend over a million dollars on lawyers, fighting against me and my wife
Gemini Links 10/08/2025: Gen Con 2025 and Framework Laptop
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, August 09, 2025
IRC logs for Saturday, August 09, 2025