08.09.09

Journalists Suggest Banning Windows, Maybe Suing Microsoft Over DDoS Attacks

Posted in Free/Libre Software, GNU/Linux, Microsoft, Security, Vista, Vista 7, Windows at 4:30 am by Dr. Roy Schestowitz

Baywatch

Summary: Recent DDoS attacks (Windows botnets running amok) affect many people and lead to hard questions

NOW that Facebook and Twitter are under siege by Windows zombies [1, 2] (it’s not over yet), a lot of people are negatively affected, not just taxpayers and hospital patients. Hundreds of millions of zombie PCs are living proof that there is no end in sight, not as long as Windows remains ubiquitous on the desktop.

Over at IDG, SJVN suggests getting rid of Windows. It’s a modest proposal.

I thought that the massive DDoS (Distributed Denial of Service) attacks that knocked Twitter and other social networks out was because of Iran’s government trying to shut down its protesters. I was wrong. Hundreds of millions of Internet users were annoyed because of Windows botnet-based DDoS aimed at one (1) person.

According to security company McAfee’s director of security research Dave Marcus, “This was a very targeted attack, and what the research shows is that it was aimed at one particular person, and that person’s accounts on Twitter, Facebook, YouTube and LiveJournal.” The target is a pro-Georgian blogger, but he’s still just one man.

For some details on that person, here is the New York Times:

The cyberattacks Thursday and Friday on Twitter and other popular Web services disrupted the lives of hundreds of millions of Internet users, but the principal target appeared to be one man: a 34-year-old economics professor from the republic of Georgia.

Also:

That latter link comes from Glyn Moody, a journalist who wrote in Twitter that Twitter was killed “with a Windows botnet, probably. Time to start suing Microsoft, maybe…”

It is a question of liability, but before anyone claims that GNU/Linux would solve nothing, here is a new article worth reading. Code scans do suggest that mature Free software is inherently more secure.

“The fact that any security issue can be seen by thousands of eyes, in fact, makes it easy to find and fix security issues. If you got proprietary software, just because the security vulnerability may not be seen in the open doesn’t make the code more secure,” Kant told LinuxInsider.

Microsoft prepares to bring many more “critical” patches. It never ends, and it’s remotely exploitable. Vista 7 will bring no change to the table. We wrote about this before, e.g. in:

Also see: When Does it Become Appropriate to Take Windows off the Information Highway?

“Two security researchers have developed a new technique that essentially bypasses all of the memory protection safeguards in the Windows Vista operating system…”

Dennis Fisher, August 7th, 2008

Share in other sites/networks: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Reddit
  • email

This post is also available in Gemini over at:

gemini://gemini.techrights.org/2009/08/09/ddos-attacks-and-microsoft/

If you liked this post, consider subscribing to the RSS feed or join us now at the IRC channels.

Pages that cross-reference this one

15 Comments

  1. Needs Sunlight said,

    August 9, 2009 at 6:48 am

    Gravatar

    Windows and M$ products should have been banned long ago. It’s good that the idea is being broached once again in this new decade, but too little action has been taken since the problems first were discussed last decade.

    The topic of ditching M$ products was more widely discussed back then even though the situation was not as dire as it now is. Many M$ applications serve little purpose other than to lock end-users into the M$ stack and are more often than not little more than security holes masquerading as useful applications.
    It’s not the products gone wrong, it’s the people inside your company pushing these M$ products that have gone wrong. It’s an H.R. problem when company employees push a political agenda that harms or destroys the company’s ability to operate.

    Look at the cost of these incidents. The cost of upgrading every last M$ chump on the planet in the course of 12 months to viable technology can’t exceed more than a tiny fraction of the quarterly damage. M$ communism costs too much to keep around. Withdrawn the corporate charter and dozens of IT companies will take off: Oracle, Sun, Red Hat, to name a few.

    So will just about every company or institution that currently uses either desktop computers, servers or both.

    zatoichi Reply:

    Windows and M$ products should have been banned long ago.

    That’s idiotic. On what basis do you “ban” an entire company’s line of (legal) products?

    It’s good that the idea is being broached once again in this new decade, but too little action has been taken since the problems first were discussed last decade.

    Nobody’s “broaching” this idea, at least not anyone who thinks things through to see whether they, in fact, have anything to do with reality.

    twitter Reply:

    A lot of less damaging “products” have been banned through class lawsuits but economic forces are even more powerful. M$ is in a position similar to but far weaker than US automobile manufacturerers. Reality is calling as M$’s proffits errode in the face of superior competition.

    zatoichi Reply:

    A lot of less damaging “products” have been banned through class lawsuits…

    Name a few, please.

    Generally products are forced off the market because they either represent a danger to life and limb (and I’m not sure how many people you want to claim have died as a direct result of using Microsoft software), or because they make illegal claims about what the product does.

    Have you read the EULA? There’s definitely some language in there (as in most software licenses) about not warranting the software for any particular purpose… Even the GPL contains such language.

    So what are you talking about, Willy?

    Needs Sunlight Reply:

    For the time being it is legal to sell M$ products or even for M$ executives to continue the false claim that they are in the software or software services business. However, that need not be the case in the future and after having been tabled for a few years, it is time for the discussion to continue.

    Even with the current ‘legality’ of M$ products, have you read the EULA? The blame rests squarely on those betraying their positions and promoting or deploying M$ products. Aluminum spanners would be legal, but a shop steward purchasing and, worse yet, deploying said spanners would be sacked. If not sacked the first time, the second or third time would involve needing the help of a proctologist to retrieve said spanners once the floor crew got done with them.

    Oh, did you read the EULA? It may *not* be legal to deploy M$ products in situations where privacy is required. Clinics, hospitals, schools and military bases are out. HIPAA = no Windows.

    Get rid of M$ products and your productivity goes up by 20%: Windows causes spam, Exchange causes lost mail, Office causes incompatible and corrupt documents, and then you have worms, worms, worms, and more worms.
    The savings from avoiding one single outbreak of a Windows worm, tens of billions of dollars, will more than cover any upgrade to Ubuntu or Red Hat plus development of a few custom applications.

    It’s legal to sell fertilizer. It’s not legal to call it a dessert topping or a floor wax. The M$ EULA might as well say in big letters “FOR NOVELTY PURPOSES ONLY. NOT FOR DEPLOYMENT ONLINE”

  2. phel said,

    August 9, 2009 at 8:04 am

    Gravatar

    Something has happened to investigative and critical journalism over the last couple decades. Tech media should have pushed the importance of security and robust applications all along. Systems and applications with inadequate security would not have been viable on the market had they been slaughtered in reviews across the board. How many articles praising windows do you see for every one that criticise it for its fundamental flaws?

    Roy Schestowitz Reply:

    Look at what Microsoft does to journalists who dare to say that Windows is not secure. Microsoft understands how to police coverage. More on that soon (leaked “Microsoft McCarthyism” list which tells them which journalists are “bad”). We’re still parsing through Comes exhibits…

    zatoichi Reply:

    Look at what Microsoft does to journalists who dare to say that Windows is not secure.

    Roy, plenty of people say WIndows is not secure. It’s generally accepted that Windows systems are less secure than Linux systems. Are you claiming that Microsoft goes after everybody who does a story on Vista security issues?

    All twenty-seven and a half million of ‘em…?

    zatoichi Reply:

    Tech media should have pushed the importance of security and robust applications all along.

    I don’t think you understand the “tech media” terribly well. Aside from folks who have a vested interest in security issues (e.g. Bruce Schneier), the tech media has always been largely supported by the advertising largesse of the tech industry.

    Systems and applications with inadequate security would not have been viable on the market had they been slaughtered in reviews across the board.

    One additional issue here is that media product reviewers, by and large, understand security issues about as well as the general public does, i.e. not at all.

  3. zatoichi said,

    August 9, 2009 at 9:31 am

    Gravatar

    This is another moronic misrepresentation of the facts, Roy. One journalist suggested “banning Windows”—something unlikely to happen—and one other suggested (stupidly) suing Microsoft for a DDOS attack initiated against a third party by a fourth party.

    If your psychotic neighbor gets mad at you and cuts the brake lines on your car, and you crash into a wedding reception, you don’t get to sue Ford, even though they designed the car in such a way that the brake lines were accessible.

    Do you even think this stuff through before you publish it? (That was a rhetorical question, it’s clear that the answer is “no”.)

    twitter Reply:

    You clearly missunderstand the issue and the impact it will have on Windows use. M$ botnets have finally done something that annoys M$ users in an unforgivable way. For a long time, M$ users managed to get along, despite their platform problems. Free software and cracked commercial software provided them with browsers, email clients, IM clients and other programs to mitigate previous damage. Now we see a demonstration of individuals using M$’s incompetence to remove the current killer applications for everyone. Facebook and twitter have influential and intelligent users who will soon make the rational choice to protect what they enjoy. These users were already leaving M$. Now they will question M$ use at work. M$ will try to spin this in favor of Windows 7 deployment but their goose is cooked. This story is just going to get bigger and uglier because Windows 7 is not the answer and the botnet problem will only get worse until Windows is gone.

    zatoichi Reply:

    M$ botnets have finally done something that annoys M$ users in an unforgivable way.

    Well, if you think many enterprises are going to be dropping Microsoft because their employees were unable to use Twitter or Facebook, I’d have to say you’re mistaken…

    In point of fact, we haven’t yet managed to get the majority of users off of Internet Exploder.

    …the botnet problem will only get worse until Windows is gone.

    Well, I’m sorry to have to tell you that, overall, Windows is not likely to be “gone” any time soon. You’re tilting at windmills here, Señor Quixote.

    The further sad fact is that, if your dream came true, and Linux systems suddenly represented a significant proportion of the desktop, the folks who write malware would certainly turn their efforts to subverting Linux systems, probably with some degree of success.

    Just as with OS X, which is arguably a lot less secure than Vista, low market share affords a level of protection from exploitation: Linux systems don’t represent an attractive or large enough target for anyone to want to take advantage of…

  4. pinguinpat said,

    August 9, 2009 at 11:11 am

    Gravatar

    Mister zatoichi,

    Maybe you could look to it this way: when a gas station sold fuel with lead in it, it would have been very normal because it was the normal stuff to sell.

    If the same gas station would do the same thing today it would be sued it’s ass of. Compare the situation with Microsoft: they start to sell operating systems in a period where internet didn’t exist. Measurements against all kind of security issues where not needed (?) Today Microsoft still makes new software on a proven base thats insecure. Why didn’t Microsoft change it’s architecture long time ago? Why shouldn’t they be kept responsible for there structurally failing of there software?? Is it really normal that they keep restaurating a new building before it’s even build ??

    zatoichi Reply:

    Today Microsoft still makes new software on a proven base thats insecure.

    Well, I wouldn’t use it, then. Plenty of people still do, however, and neither inarticulate comments, nor demands that they be free the way you tell them to, will keep them from doing so.

    Why didn’t Microsoft change it’s architecture long time ago?

    How would I know? Ask ‘em.

    Why shouldn’t they be kept responsible for there structurally failing of there software??

    Because you agree not to hold them responsible when you install and use their software, if you choose to do so: that’s what “no warranty” means. Just like with GPL-licensed software.

    Always read the fine print.

  5. pinguinpat said,

    August 9, 2009 at 3:29 pm

    Gravatar

    Do you know the song from the Bloodhoundgang: the bad touch? We are not more than mammals!! When there’s a critical mass, you can make a human eat shoe laces for breakfast!! When you sell a computer to a newbie there’s a good change that he/she doesn’t care about the os. If there’s not a penguin with a gun pointed in they’re back they simply wont leave the shop with Linux on there laptop, that is if they can :(

    I did try to ask Microsoft about the architect problems but my cellphone ran out of power after a 3 hour call, I heard a friendly lady say “For Bill Gates pres” she didn’t tell me the rest :(

    About the license: imagine, I buy a laptop with Windows on it (I woke up in sweat when I had that dream) the license is OEM of course so I am the only possible owner if you read the license. Someone steals my machine (you stupid, it got Windows on it) and puts a botnet on it. Now you: hacking and stealing are the same things > someone takes over you’re computer. What can a judge say? You bought a computer, you installed a intrusion alarm, you locked up your front door and you install updates automatically just like most users do. Microsoft judges exist, but what can an other judge say then: You agreed with the license, you’re guilty: you have to pay a symbolic 500 million euro to twitter , I know you had a criminal visitor who exploited the top 500 bugs from Microsoft, but you were the only one that didn’t run away in time??

What Else is New


  1. IRC Proceedings: Friday, May 07, 2021

    IRC logs for Friday, May 07, 2021



  2. [Meme] Outsourcing Audacity Development to Microsoft Proprietary Software and Then Copying Microsoft Tactics (and 'Telemetry')

    They've had the audacity to call it "telemetry" and pretend that surveillance companies (spying giants) cannot figure out who you are based on IP addresses



  3. Links 7/5/2021: IPFire 2.25 Core Update 156 and Diffoscope 174 Released

    Links for the day



  4. The New Microsoft? No, the New IBM.

    Microsoft GitHub and IBM: a strategic alliance between a monopolistic duo



  5. The Audacity Takeover by Muse Group is No Cause for Celebration

    Audacity is now part of an entity called Muse Group and if it doesn’t take or suck freedom out of Audacity, it will certainly deny users rather basic concepts (or anticipation) of privacy



  6. King of Linux

    If the entire operating system is being called "Linux", then we fall for a publicity or misattribution stunt



  7. The Biggest Troll is the Linux Foundation, Still Looking to Provoke and Defame Free Software Communities in Order to Help a Monopolistic Takeover and to Shoehorn Tyrants Into Leadership Positions

    Contrary to what the so-called ‘Linux’ Foundation is trying to say, the most toxic element is itself; it’s maligning the real community while protecting abusive and racist corporations that profit from war and tribalism-motivated hatred



  8. IRC Proceedings: Thursday, May 06, 2021

    IRC logs for Thursday, May 06, 2021



  9. “The Lolita Express” and Prince Bill

    “The Lolita Express” scandals return to haunt pool old Bill, as it turns out his wife was upset and it's quite likely the reason for their divorce



  10. Links 7/5/2021: GNU/Linux Preinstalled, Plamo 7.3, LibreOffice 7.1.3

    Links for the day



  11. The Latest Reports About Bill Gates Serve to Confirm or at Least Reaffirm Many People's Suspicions

    So, just as many people suspected, Melinda Gates did not appreciate her husband sneaking behind her back to meet someone who had trafficked thousands of underage girls for sexual exploitation and there are high-profile calls right now for greater transparency, seeing the impact on the world’s biggest tax evasion vehicle



  12. Disregard Web Sites That Call Themselves 'News' and Instead Promote Proprietary Software for Companies Like Microsoft

    Publishers like IDG have long been paid-for marketing in ‘article’ clothing, sometimes with the veneer of ‘reporting’ (as if they have some inside knowledge or insight, e.g. speaking with or for the company they secretly coordinate with or market for); but sadly we’ve been seeing some so-called ‘Linux’ sites doing the same thing, in effect acting like de facto Microsoft marketers



  13. [Meme] Who Needs Examination Anyway When There's 'Hey Hi' (AI)?

    The patent production line could do away with 'pesky' and 'opinionated' examiners who actually wish to scrutinise alleged 'inventions'



  14. Europe's Second-Largest Institution Corrupting the Media and Buying Expensive Puff Pieces

    As annual reports reveal, the EPO wastes an extraordinary amount of money on reputation laundering campaigns and it pollutes the signal by paying publishers; we examine this issue using the new 'reports' shown in the video above



  15. Links 6/5/2021: Fedora’s Compiler Policy and Celemony Software GmbH Adopting Free Software

    Links for the day



  16. Free Software Proponents Don't Fall for Bullshit (Same is True for EPO Examiners)

    There are parallels between what happens in the Free Software Movement and the EPO, where well-meaning people — and usually hard-working scientists — are besieged by people who never really contributed anything to society



  17. IRC Proceedings: Wednesday, May 05, 2021

    IRC logs for Wednesday, May 05, 2021



  18. Lessons From Another Failed Coup Against the Free Software Movement

    The coup has very clearly failed and we should prepare for future attempts (they go in cycles); the monopolies really dislike software they cannot control fully (e.g. copyleft/GPL-licensed software)



  19. Links 5/5/2021: Mesa 21.1 Released and New Releases of Python

    Links for the day



  20. Links 5/5/2021: StarLabs, GNU Zile 2.6.2, Fedora i3 Spin

    Links for the day



  21. Phony 'Scandals' From Phony 'News' Site ZDNet

    Steven J. Vaughan-Nichols continues the coup against the FSF (trying to separate it from its founder, Richard Stallman), funded by IBM and Microsoft to engage in libel at a marketing company-owned ‘news’ site called ZDNet



  22. Links 5/5/2021: Windows Security Breaches and GNU Pokology Launched

    Links for the day



  23. IRC Proceedings: Tuesday, May 04, 2021

    IRC logs for Tuesday, May 04, 2021



  24. Links 4/5/2021: Taiwins 0.3, KDE Plasma 5.21.5 Released

    Links for the day



  25. EPO Already Wasting Money on Media Manipulation Campaigns for European Inventor Award

    An online-only European Inventor Award 'event' is being used as a pretext/excuse to flood European publishers with money they can rightly perceive as 'hush money'; everyone out there with no spine would likely buckle at the sight of EPO euros and just produce mindless puff pieces that serve to distract from EPO corruption



  26. The Timing of This Melinda Gates Tweet Was Always Curious...

    Remarking on her trip to Africa, where the Gates family lobbies for monopolies on seeds (for profit or course, notably through Monsanto/Bayer, which the Gates family heavily invests in), she posted pure fluff and old photos. And it’s hard to believe she had nothing better to do at the time (better than such nostalgia). As we noted last year: “The above tweet of a beach was posted [by Melinda Gates] on the date of the arrest/search of their employee, who was at their residence at the time.” He was arrested around the very same time this tweet was posted. As we wrote last year (based on detailed documents obtained from the police department): “This tweet was posted 2 hours and 40 minutes after the door was breached and incriminating evidence collected.” He was arrested later that morning at the mansion of Bill and Melinda Gates (the police records contain detailed timelines to confirm the chronology). Melinda’s first name was also in the CP 'stash'.



  27. Media Frenzy Around Gates Divorce Helps Distract From Bill's Crimes

    The distraction from many Gates scandals is cushioned by yet another personal fluff; we would rather see investigative journalism pursuing real answers about real scandals



  28. IRC Proceedings: Monday, May 03, 2021

    IRC logs for Monday, May 03, 2021



  29. EPO Disregards Animal Welfare

    An often overlooked issue surrounding the second-largest institution in Europe is its impact on millions if not billions of animals; there's ongoing research into that



  30. Links 3/5/2021: Sparky 5.15, Bill Gates Divorce, Netflix Fraud

    Links for the day


RSS 64x64RSS Feed: subscribe to the RSS feed for regular updates

Home iconSite Wiki: You can improve this site by helping the extension of the site's content

Home iconSite Home: Background about the site and some key features in the front page

Chat iconIRC Channel: Come and chat with us in real time

Recent Posts