08.28.10
“Looks Like Microsoft is Doing Damage Control on Virus Attacks”
Summary: The Internet is at risk of falling further into the hands of centralised authority as problems associated with Windows are named
“It looks like Microsoft is doing damage control on virus attacks and is looking to use their failure to exert yet more control,” wrote a reader of ours last night. “Check out the Slashdot blurb, which fails to call out Windows! They outlawed USBs when they should have dumped Windows instead.”
For those who want to see the latest cyberwar propaganda (unlike the cost assessments [1, 2]), here’s an AFP report. Who’s to blame? Well, a new IBM report names Apple and Microsoft as most vulnerable vendors:
IBM’s X-Force threat report for the first half of 2010 lists Apple, Microsoft and Adobe Systems as the makers of products with the most vulnerabilities.
These three firms champion proprietary software. What should the Pentagon deduce? Maybe this question is rhetorical. █
“The continuous and broad peer-review enabled by publicly available source code supports software reliability and security efforts through the identification and elimination of defects that might otherwise go unrecognized by a more limited core development team.”
–CIO David Wennergren, Department of Defense (October 2009)
Content is available under CC-BY-SA
twitter said,
September 4, 2010 at 6:20 pm
The whitewash continues at Slashdot. An article which contains this text:
is presented with and overall spin Microsoft would be proud of. Basically, they say, this widely reported incident never happened or did not happen in the way it is presented.
Sadly, none of the articles calls out Windows. The whole usb auto-run thing is a Windows problem as are the network issues that make usb keys a must have tool in any Windows environment, not just “battle fields” like the HQ described as the center of the outbreak. The cooperative network of the One Laptop Per Child devices, for example, greatly reduce the need for usb keys and can obviously be scaled up and secured with OpenSSH. Free software is also a lot easier to remotely administer, so you could disable usb keys if any gnu/linux distribution had autorun enabled – most don’t even automount and none that I’m familiar with would auto execute binaries.