Bonum Certa Men Certa

Microsoft Attempting to Destroy the Careers of Its Critics, Including Free Software Proponents

Cult-like tactics. Or doxing to secure bug doors. Is this what "business intelligence" was all along for?

Microsoft bullying



Summary: Microsoft isn't changing and has not changed; the tactics described above are still being used, even by its "Open Source" (or "Open at Microsoft") people, who did this to me

IT IS a small world after all. Someone in the Fediverse pointed out to me this new tweet about Microsoft bullying, which reminded me of these cult-like tactics Microsoft used against myself and others. From the original thread (there are also many comments in there):



I think you must be talking about CVE-2010-0232, it wasn't 90 days, it was more like 180. This was at a time when Microsoft refused to release kernel patches outside of service packs. I begged Microsoft at multiple in-person meetings at Redmond to reconsider and patch, they simply refused and said there were would be repercussions if I disobeyed. After four months of negotiations, I told that I'm going to publish it whether a patch was available or not. This didn't have the effect I had hoped, they started threatening me instead. They called me and told me my career would be destroyed. In one particularly memorable call they told me that their PR and legal department only had two settings, "off and destroy" and (in a rather menacing tone) that they would "air my dirty laundry in public". I still don't know what that means.

I was shaken, but told them I'm still going ahead. They responded by calling everyone they knew at my employer demanding I was terminated.

There was a trivial mitigation, just disabling a very rarely used feature (vdm support for 16 bit applications). I made detailed documentation explaining how to enable the mitigation for every supported platform, and even made tutorial videos for Administrators on how to apply and deploy group policy settings.

Here are the instructions I wrote:

https://seclists.org/fulldisclosure/2010/Jan/341

And here's a video I made showing how to apply the policy to a Windows Server 2003 machine like yours:

http://www.youtube.com/watch?v=XRVI4iQ2Nug

I sent these detailed instructions to all the usual places that advisories are published. I included a test case so you could verify if the bug affected you and verify the mitigation was correctly deployed. As you can imagine, Microsoft were furious.

I know it's little comfort, but through some hard fought battles over the last decade we have reached the point that Microsoft can reluctantly patch critical kernel security bugs if given around three months notice. They still pull some dirty tricks to this day, you wouldn't believe some of the stories I could tell you, but those are war stories for sharing over beers :)

It sounds like your attackers compromised you with an outdated wordpress installation, then gained privileges with this vulnerability. I'm not sure I agree the blame here lies solely with me, but regardless, I would recommend subscribing to the announce lists for the software you're deploying. You could also monitor the major security lists for advisories related to the software you use. It's high volume and varies in quality, but you can usually identify the advisories that apply to you easily.


We've documented many examples like it for over a decade (we've lost count!) and we have some wiki indexes for these. Incidentally, we've just added the "Librethreat Database", contributed by an anonymous reader who is also a software developer working on GNU/Linux.

It's very important to understand what Microsoft is up to; it's not a friend, it's just getting closer for the purpose of causing damage (from the inside). Earlier this month Dina Bass wrote a widely-syndicated (dozes of news sites) piece pretending that Microsoft was reaching peace and had already appeased its biggest critics. It's a lie, but if the media keeps repeating this lie, then more and more people will believe it. To appease the Linux Foundation and OSI Microsoft just had to dump some money of them; that's not about trust, it's about corrupting people using money -- not the same thing!

"Dina is on one," Mitchel Lewis told us about this new tweet from Dina Bass. "She’s like their top 5 shill right now."

"It's very important to understand what Microsoft is up to; it's not a friend, it's just getting closer for the purpose of causing damage (from the inside)."Notice Mitchel Lewis responding to her Microsoft revisionism and white-washing. She has long worked as Microsoft's de facto PR person, as we noted here before. She's a "media insider", just like Microsoft Peter. Several of our readers and active members theorised that Microsoft had long known about his pedophilia (he raped children) and used that to control him; we lack evidence to show/prove this, so we never entertained that angle. Some people urged us to explore that angle, but we never did. Someone told us a story to that effect involving a relative who had worked at Microsoft (and Microsoft used sexual means to manipulate him). Mr. Lewis said so himself and his claim is supported by what people told us over E-mail and IRC. This seems to be an unreported or grossly underreported issue that may or may not relate to manipulation of people through Code of Conduct, NDAs and so on. Mr. Lewis has meanwhile just published "Digital Oxy", comparing Microsoft's tactics to those of "legalised" drug dealing. It's part of his ongoing series of articles exposing the true nature of the Microsoft monopoly -- a subject he understands as a former insider:

Despite maintaining a portfolio of aging products that have never been as complex, buggy, vulnerable, or costly to manage as they are today, IT professionals around the world maintain that Microsoft products remain the best in their class. To their credit, Microsoft is the largest company in the world when measured by market cap, the prevalence of their products is undeniable, and Windows is still the de facto gaming platform, so it’s easy to see why so many are under this impression. But market cap, prevalence, and gaming are not the measures of all things and a different narrative immediately becomes apparent when relying on metrics that actually take consumer and business welfare into account to determine which is the best.

Case in point and despite their prevalence or market cap, one would have to scrape the proverbial barrel in order to find a metric that favors Microsoft mainstays relative to their competition when evaluating them based on metrics emphasizing on business welfare that prioritize quality, productivity, simplicity, security, supportability, etc. This is so much the case that, IBM, the inventor of PCs, noticed a reduction in ownership costs to 1/3 that of Windows PC users by migrating users to the Apple ecosystem; which is significant amount of disparity in an industry where even a 1% savings will make executives randy.

[...]

Although many interpret the present complex, buggy, vulnerable, and costly state of Microsoft solutions as the product of ignorance and apathy, these aren’t the actions of a firm ignorant to software engineering best practices. It actually requires a high-level understanding of software to engineer it for entrenchment, dependence, and lock-in, let alone build an extensive partner network to distribute it through and Microsoft’s market performance is a testament to this, not an exception.

No differently than Purdue Pharmaceutical being dependent on a network of profiteering drug dealers masquerading as doctors, it seems as if Microsoft is dependent on a conflicted network of maladapted experts entrenching their own products throughout industry just the same. When combining such a conflict of interest with products streamlined for entrenchment in a woefully under-regulated industry, Microsoft’s success, the prevalence of Windows, and their staying power throughout industry instantly becomes much more palpable and markedly less ethical.


We can warmheartedly recommend his other writings, which we sometimes cite.

Don't believe that because Microsoft changed (yet again) its logo and CEO it means different tactics and intents. Bill Gates is still in charge of Nadella and can fire him at any time (through the Board). The same people are in charge and they're still ruthless and manipulative. The software and services are technically shoddy, but we prefer focusing on ethics.

Recent Techrights' Posts

An "Efficient Windows 11 Experience" is Removing a Text Editor (Less than 5 Megabytes in Size) and Adding Chatbots That Require a New PC/Datacentre
Vista 11 24H2 update removes WordPad
 
The Campaign to 'End' Richard Stallman - Part II - Scaring People Who Produce Videos in Support of Stallman
There are allegations of threats, defamation, and censorship
A 3-Year Campaign to Coerce/Intimidate Us Into Censorship: Targeting My Wife
In my view, it is a form of overt sexism
[Chart] Chromebooks in Micronesia Grew at the Expense of Microsoft Windows
As of today...
Linus Torvalds Mocked "Cloud Native" in His Latest Talk (Arguing It's Just Hype), 'Linux' Foundation 'Research' (Marketing) Chooses Proprietary Software to Query Its Adopters
The name "Linux" is overused, abused, even grossly misused
Links 29/05/2024: More Arrests of Regime Critics and Hate Crimes
Links for the day
Brittany Day (linuxsecurity.com) Now Leverages Microsoft Chatbots to Promote Microsoft Propaganda Disguised as "Linux"
What Brittany Day does is an attack both on the Web and on Linux
[Meme] Don't Trust Users to Boot Their Own PCs?
UEFI 'secure' boot
Links 29/05/2024: Hack The Box, Why I Left Healthcare, and Chatbots as Health Risk
Links for the day
Gemini Links 29/05/2024: BESM Retro Second Edition and Itanium Day
Links for the day
Azerbaijan: Microsoft Falls From 99.5% to Almost Nothing or Less Than 20% (Windows Down Sharply, GNU/Linux Surges)
Based on statSounter
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, May 28, 2024
IRC logs for Tuesday, May 28, 2024
The Campaign to 'End' Richard Stallman - Part I - Two Canceled Talks in a Row?
RMS has left Europe, so the concept of "delayed" talk is facetious or deeply cynical
On Desktops/Laptops in Andorra Windows Fell to Less Than Half, 20% If One Counts Mobile as Well
And this is a European country
[Meme] 3 Years Later
If you're going to start a fight, make sure you can handle it
When You Leave a Bad Employer and Move on to Better Things
Perhaps my main mistake was not resigning from my job sooner
No, Your Site Likely Does Not Need WordPress
I was one of the first users of WordPress
GNU/Linux in Cameroon: Rising Steadily While Windows Falls From 99% to Just 6%
If one also counts mobile (mostly Android)
Monkey See, Monkey Share
on deprivation of users
From 0.17% to 10% or More (GNU/Linux in Dominica)
Dominica isn't well known, but it does seem to have embraced Chromebooks in recent years
Links 28/05/2024: Tensions in East Asia, UK Mandatory National Service
Links for the day
Gemini Links 28/05/2024: NetCrawl and Living in Lagrange
Links for the day
Guardian Digital, Inc (linuxsecurity.com) Handed Over Its Web Site to Chatbots That Generate SEO Garbage
They need to be called out on it
statCounter Sees Microsoft Windows at Below 1% in American Samoa
Not even 1%!
Windows Down to 60% of Guam's Desktops/Laptops and Down to a Quarter Overall
No wonder Microsoft is panicking
Today in UEFI 'Secure' Boot Debates (the Frog is Already Boiling and Melting)
Over at LQ today
[Meme] A "Modern" Web's Message in a Bottle
So-called 'security'
Brittany Day: Still Chatbot Slinging, Producing Fake 'Articles' About "Linux"
random garbage produced (and censored) by Microsoft
Almost 4k Gemini Capsules, 5th Anniversary Only Weeks Away
The Web will continue to deteriorate
Microsoft: $1 Million a Day for Contempt of Court Orders (Justice Department)
Microsoft behaves as if it's 100% exempt from laws
Catbodia? In Cambodia, Microsoft's Windows Fell to All-Time Low of Less Than a Quarter.
Cambodia is leaving Microsoft behind
[Meme] Deadnaming
Guess who uses a name that was deprecated well over a decade ago?
[Meme] 'Secure' Boot in a Nutshell
Ask Microsoft if it is "safe" to boot Linux
New Press Report Explains Microsoft Severance and Quiet (Undisclosed) Layoffs
Some people will call this "loophole", whereas others will opine that it is outright illegal (but kept secret to circumvent scrutiny)
Global South is Android/Linux (Windows Era Has Come to an End Already)
I've decided to take a quick glance at South American trends for all operating systems
[Meme] Unified Patent Troll
Unified Patent Court remains illegal and unconstitutional
The European Patent Office is Sinking
Officials (or national delegates) at the European Patent Organisation have long been warned about this (by staff representatives from the European Patent Office), but they ignored the warnings
A 3-Year Campaign to Coerce/Intimidate Us Into Censorship: Targeting Guest Writers (Intimidation)
Some high-profile people have told me that the serial defamer is a "monster" (their word), so why would Neil Brown wish to help him?
Summer in the Air
We have a good pace going on owing to health, positivity, inertia and good software tools
GNU/Linux Activity in Belize
From an economic point of view, Microsoft needn't worry about Belize, but when it comes to preserving the Windows monopoly/monoculture Belize matters
Links 28/05/2024: Back to MP3, NVIDIA Sued by Authors
Links for the day
Gemini Links 28/05/2024: Bad Beach and TLS
Links for the day
Microsoft Windows Fell From 100% to Just 7.5% in Sierra Leone
Based on statCounter
In Benin, Microsoft's Windows Fell Below 10%, GNU/Linux Surged to 6% or Higher on Desktops/Laptops
That's nearly 7% - a lot higher than the average in Africa
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, May 27, 2024
IRC logs for Monday, May 27, 2024
Delayed Series About Dr. Richard Stallman
A lot of the attacks on him boil down to petty things
[Meme] Elephant in the Asian Room
With ChromeOS included GNU/Linux is at 6% across Asia
GNU/Linux in Bangladesh Up From 0.5% to Over 4% (Windows Slid From 95% to 18%)
Bangladesh is one of the world's most densely-populated countries
A 3-Year Campaign to Coerce/Intimidate Us Into Censorship: Targeting Several Webhosts (in Collaboration and Conjunction With Mentally-Ill Flunkies)
Every attempt to nuke the current hosting failed, but it's still worth noting
Links 27/05/2024: One Month Left for ICQ, More Openwashing Highlighted
Links for the day
Gemini Links 27/05/2024: Back to GNU/Linux, Librem 5 Assessed
Links for the day
StatCounter (or statCounter) Has Mostly Recovered From a Day's Downtime (Malfunction)
Some of the material we've published based on the statCounter datasets truly annoys Microsofters
Google: We Don't Have Source Diversity, But We Have Chatbot Spew in Place of Sources (and It's Not Even Accurate)
Search engines and news search never looked this bad...
[Meme] Security is Not a Failure to Boot (or Illusion of Security Due to 'Unknown' System)
Red Hat is largely responsible for this mess
What is Secure Boot?
Security means the user feels safe and secure - i.e. confident that the machine would continue to work following a reboot or a system upgrade (or kernel upgrade)
StatCounter (or statCounter) Has Been Broken for Nearly 24 Hours. Who Benefits? Microsoft.
StatCounter is broken right now and has been broken for nearly 24 hours already
Links 27/05/2024: Chatbots Generate Hateful Output, TPM Performance Scrutinised
Links for the day
David Heinemeier Hansson (DHH) Realises What He Should Have Decades Ago
seeing that DHH is moving away from Apple is kind of a big deal
Reinvigorating the Voice of GNU/Linux Users (Not Companies Whose Chiefs Don't Even Use GNU/Linux!)
Scott Ruecker has just announced his return
"Tech" in the Context of Even Bigger Issues
"Tech" (or technology) activism is important; but there's a bigger picture
A Decade of In-Depth Coverage of Corruption at the European Patent Office (EPO)
The world needs transparency and sunlight
Hopefully Not Sunset for StatCounter
We hope that StatCounter will be back soon.
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, May 26, 2024
IRC logs for Sunday, May 26, 2024
Links 27/05/2024: Self-Publishing, Patent Monopolies, and Armed Conflicts
Links for the day
Gemini Links 27/05/2024: Tethering Connection and PFAs
Links for the day
Imagine Canada Enabling Rapists to Harass Their (Rape) Victims
This analogy is applicable because abusers are empowered against the abused