Bonum Certa Men Certa

Microsoft is Still a Hugely Expensive Security Joke

Destructive business



Summary: Microsoft negligence causes great damages and even Microsoft itself is unable to keep its sites from being cracked

THE consequences of relying on Microsoft are quite severe. There is no assurance of security and no liability either. It is occasionally being claimed that when choosing propriety software one can hold the vendor accountable, but here we have a situation where Free/open source software, which is essentially decentralised, offering just as much peace of mind if not more (because more people inspect the code).



A reader drew our attention last week to this article which shows Windows Trojans in action. To quote:

The malware, known as the “DNSChanger Trojan,” quietly alters the host computer’s Internet settings to hijack search results and to block victims from visiting security sites that might help scrub the infections. DNSChanger frequently was bundled with other types of malware, meaning that systems infected with the Trojan often also host other, more nefarious digital parasites.

In early November, authorities in Estonia arrested six men suspected of using the Trojan to control more than four million computers in over 100 countries — including an estimated 500,000 in the United States. Investigators timed the arrests with a coordinated attack on the malware’s infrastructure. The two-pronged attack was intended to prevent miscreants from continuing to control the network of hacked PCs, and to give Internet service providers an opportunity to alert customers with infected machines.


The cost of this must be high and damages from Windows insecurities might be totalling over a trillion dollars by some estimates. Until or unless systems rid themselves of Microsoft it is likely that things will stay as gloomy. Lo and behold -- a link sent to us last night by a reader shows that even Microsoft is unable to guard its territory. "Microsoft's India store hacked," says the headline (they mean "cracked") and "usernames & passwords [are] stolen" (this is self-explanatory really).

"The cost of this must be high and damages from Windows insecurities might be totalling over a trillion dollars by some estimates.""Hackers," it says in reference to crackers, "allegedly belonging to a Chinese group called Evil Shadow Team, struck at www.microsoftstore.co.in on Sunday night, stealing login ids and passwords of people who had used the website for shopping Microsoft products.

"While it is troublesome that hackers were able to breach security at a website owned by one of the biggest IT companies in the world, it is more alarming that user details - login ids and passwords - were reportedly stored in plain text file, without any encryption." This is yet another example of Microsoft negligence [1, 2, 3, 4, 5].

Recent Techrights' Posts

Jim Zemlin/Linux Foundation Selling Anthropic Slop After Getting Bribed for Slop Marketing ('Linux' Foundation is a Pay-to-Say For-Profit Marketing Company That Buys and Manipulates the Media Based on False Pretences)
Look what they've done to Steven Vaughan-Nichols (SJVN)
The Corrupt Lecture the Non-Corrupt - Part XX - EPO Management's Unified (One) Voice or Policy is, Doing Cocaine is OK When You're a Friend and/or Family of President Campinos
The management needs to resign to save the Office
 
The Slop-Amplified Fear of Privilege Escalation (Local, Not Remote) in Linux, the Kernel
we are meant to assume this is no better and no worse than Microsoft intentionally putting back doors in everything, even encryption
GitLab the Latest Company to Do Mass Layoffs and Use Slop as the Go-to Excuse (GitLab Users Should Worry Too)
This round of layoffs (disguised as something else) has nothing to do with slop ("hey hi"). It's about commercial problems.
Technology Not Meant to Last
A society apathetic towards declining production (or manufacturing) standards will end up ripped off
statCounter Cannot 'See' Chinese Operating Systems That Gain Many Millions of Users Per Month
There is no way for statCounter to recognise or show the market share of HarmonyOS
SLAPP Censorship - Part 74 Out of 200: The Basis of My Lawsuit Against Alex Graveley, Who Helps Garrett Stack the Docket in Another Continent
claim against the Serial Strangler from Microsoft
Update on Slop About "Linux"
"Linux" is a term many people are interested it, so it's not shocking that slopfarms target it
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, May 11, 2026
IRC logs for Monday, May 11, 2026
GAFAM (Microsoft) "Cloud Computing" Means Another Country's Military Accesses All Your Data
reminder that confidentiality and Clown Computing are complete opposites
Another Discrimination Lawsuit Against IBM and Workers Say IBM Culls Older Workers (Just Like Microsoft)
If IBM fails to retain some of the smartest people, then what is the future of IBM?
Gemini Links 12/05/2026: Android Nostalgia and Switching to Guix
Links for the day
Links 11/05/2026: Another Oracle Setback and Mass Layoffs in Iran
Links for the day
Gemini Links 11/05/2026: Older Can Be Faster and Textmode Workflow
Links for the day
Links 11/05/2026: The Solicitors Regulation Authority (SRA) Admits It Only Reacts When It's Too Late (Damage Already Done), Ombudsman’s Animal Cruelty HK Report
Links for the day
If It Takes You a Second to Serve (or Receive) a Page, That's Definitely Too Slow
For speeds at milliseconds (e.g. for pages to fully load in a tenth of a second) the pages must be ready to be sent as soon as they're requested
It's Not About Speed, It is About Patience and Adherence to Truth, Principles, Scientific Integrity
attacks on us only ever made us stronger - a lesson that our adversaries have learned the hard way
Cyber Show Does it Like Techrights: Static and Gemini Protocol as 'First-Class Citizen'
HTML and GemText (over Gemini Protocol) would be rendered in tandem
Libya's Share on the Web: 5.2% GNU/Linux
GNU/Linux has hit an all-time high there
SLAPP Censorship - Part 73 Out of 200: Microsoft's Graveley and Garrett Remain Closely Connected in May 2026 ("Tag-Teaming" Against Bloggers in Another Continent)
The phrase "judge a person by their friends" seems applicable here
Codecs and Software Patents - Part VI - The European Patent Office, Nokia, Microsoft, Sisvel, and More
Whatever Nokia used to be, it's certainly not an ally and a lot of the turmoil at the EPO is the fault of companies like Nokia
Discussions About When the Axe Falls at IBM/Kyndryl (11,000 Layoffs Estimated)
"Kyndryl restructuring should reduce overhead functions and reduce the number of managers that lack technical knowledge"
A World After Microsoft (and GAFAM) and After GitHub Shuts Down
the only growth area is debt
Fake News, Propaganda, and Misinformation: Microsoft Investing Money It Does Not Have in "Hey Hi" (for "Entertainment Purposes" Only)
This will not end well
Today the Whole European Patent Office (EPO) is on Strike and Next Monday an Even Bigger Strike
the media refuses to cover these and is thus complicit
The Corrupt Lecture the Non-Corrupt - Part IXX - EPO Management Speaks of Reputation and Integrity While Putting Cocaine Addicts in Management
If the EPO values its "reputation", then it needs to start by ousting the management
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, May 10, 2026
IRC logs for Sunday, May 10, 2026
Links 11/05/2026: Security Breaches, Politics, and Energy Crunch
Links for the day
Gemini Links 10/05/2026: "Accidental Cameras" and "Addictive" Interfaces in Social Control Media
Links for the day
Codecs and Software Patents - Part V - A Reminder That GAFAM and the European Patent Office (Which Serves American Monopolists) Do Considerable Harm to the Commons and Culture
some 'breaking' developments
Gemini Links 10/05/2026: Inkscape, Guix, and Alhena 5.5.8
Links for the day
The "Alicante Mafia" at the European Patent Office (EPO) Experiments With New Methods for Crushing Industrial Actions
Open letter to VP1 and the COO [...] What does this tell us about the status quo at the European Patent Office, Europe's second-largest institution?
The Corrupt Lecture the Non-Corrupt - Part XVIII - "The European Patent Office (EPO) has a zero-tolerance policy for fraud" (except when managers do it)
The guidebook of the EPO says fraud is not to be tolerated, but who enforces or revisits such "Red Lines"?
Links 10/05/2026: Hantavirus Brings Back 'Contact Tracing' Surveillance, "Staple Food Prices Soar in Iran"
Links for the day
Microsoft XBox Staff Know They're in Trouble, They Try to Unionise Ahead of Mass Layoffs
As the slang goes, it's going to be a "bloodbath"
Links 10/05/2026: Fake Suicide Notes and New EU Restrictions on Slop
Links for the day
SLAPP Censorship - Part 72 Out of 200: Microsoft's Graveley and Garrett Signed Documents That Hold Them Accountable to Truth and Liable for Lies
Such collaborations are unsavoury and apparently unprofessional, too
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, May 09, 2026
IRC logs for Saturday, May 09, 2026
Gemini Links 10/05/2026: Travelling to Van and "Dark Mode" as Passing Fad
Links for the day