Microsoft Denies NSA Backdoor in Windows 7

This is eyebrow-raising.

Microsoft denies it built ‘backdoor’ in Windows 7
Don’t worry, company tells users; NSA involved only in security compliance standards

November 19, 2009 (Computerworld) Microsoft today denied that it has built a backdoor into Windows 7, a concern that surfaced yesterday after a senior National Security Agency (NSA) official testified before Congress that the agency had worked on the operating system.

“Microsoft has not and will not put ‘backdoors’ into Windows,” a company spokeswoman said, reacting to a Computerworld story Wednesday.

On Monday, Richard Schaeffer, the NSA’s information assurance director, told the Senate’s Subcommittee on Terrorism and Homeland Security that the agency had partnered with the developer during the creation of Windows 7 “to enhance Microsoft’s operating system security guide.”

Pardon me, but I find it VERRRRY hard to believe anything Microsoft OR the NSA has to say. Maybe they did, maybe they didn’t. It does not help that both companies resort to Newspeak, either: “enhance” the security guide?? Enhance, huh?

*bells and whistles*

The story goes on:

Microsoft’s rejection of the idea that it’s hidden a backdoor in Windows came as no surprise to security researchers, who yesterday expressed doubt that the company would put its reputation at such risk. “I can’t imagine NSA and Microsoft would do anything deliberate, because the repercussions would be enormous if they got caught,” Roger Thompson, the chief research officer of antivirus vendor AVG Technologies, said yesterday.

John Pescatore, an analyst with Gartner Research, agreed. “[The concerns] are way overstated,” he said today in an e-mail. “NSA worked with Microsoft and others, like Cisco, on security configuration standards for [their] products.”

Cisco, in fact, has built “lawful intercept” capabilities into its products, including its Internetworking Operating System (ISO) and its VoIP (Voice over Internet Protocol) lines. The term describes the process by which law enforcement agencies conduct electronic surveillance of circuit and packet-mode communications under authorization, such as electronic wiretap orders.

“Lawful intercept” capabilities, eh? What law? This is surveillance without probable cause. I’d like to know where in the Constitution it says government can monitor the activities of American citizens.

It’s getting crazy out there…

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]

No More Windows XP Service Packs

I was never a great fan of those mega-monster, dialup-choking service packs from Microsoft anyway, but I guess they were necessary from time to time. Windows XP is just over seven years old now, and Windows is getting eager to dump XP for their Vista and latest OS, Windows 7. I still have quite a number of XP computers around here, so I hate to see them go the way of the dinosaur. There’s nothing wrong with the operating system, sheesh!

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]
Posted in Windows. Tags: , , . Comments Off »

Planned Obsolescence

Will someone please tell me WHY there is this great big push to shelve technology– especially operating systems? And especially Microsoft operating systems?

OK, let me back off a little. There’s talk that MS will let Vista just fade away. It’s outdated, too buggy, and too bulky.

The Microsoft executive in charge of Windows urged some companies this week to dump Vista deployment plans and shift to Windows 7, the operating system the company has promised to ship in the fourth quarter.

“If you’re just starting your testing of Vista, with the [Windows 7] Release Candidate and the quality of that offering, I would switch over and do your testing on the [Windows 7] Release Candidate, and use that going forward,” Bill Veghte, Microsoft’s senior vice president for Windows business, said in a keynote speech earlier this week.

EXCUSE ME?! HELLO?! Just a year or two ago, Vista was hailed as THE FUTURE in operating systems! Now all of a sudden it’s junk? I think there’s more to all this than just the “this stinks” mantra that we hear every time MS releases a new operating system. It was only just a FEW short years ago when MS came out with XP. Do you remember allll the bellyaching that arose when XP came out?! I do! Everyone and their mother hated XP, they wanted Windows 98 back! But lo and behold, now XP is near perfection, especially compared with [evil organ music] VISTA. Vista must go, Vista must die! And what is there to take it’s place? Why, ANOTHER brand new, very expensive operating system!!

Something’s fishy.

So I predict that in 3-4 years from the release of Windows 7 (the sparkly new operating system coming out in October 2009), everyone will softly reminisce about the “good ol’ days” back when there was Vista.

Gimme a break. :cwazy:

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]

Update Mania

Like the sands of the hourglass, like the political tweaking of the Medicare supplement plan, software updates are ever with us. Two biggies hit the scene this month. Here’s what’s up…

Firstly, if you use the Firefox browser, it is advisable that you update to the latest version, 3.5. The update fixes some serious security bugs. There’s a video explaining more about the update at the Mozilla website. I updated and didn’t notice very much except that two of my favorite AddOns no longer work (one of them being TabMixPlus). :( But I use Opera whenever possible.

Secondly, Microsoft has officially released Vista Service Pack 2, after several months of beta. There’s a great post by PC World Six Things You Should Know About Vista SP2, and another informative article here. Microsoft has their own basic bones explanation (as basic as MS can get, anyway) about the SP2.

I still have Vista SP1. I don’t have any intention of rushing to get SP2, unless it will improve my graphics card performance. I have a Nvidia GeForce 9100… not top of the line by any means, but it should be able to handle my tasks, especially since I have a quad-core machine. But it’s starting to stutter, and I’m wondering if a Vista update may be responsible. (I do have the latest driver for the card). I’m really cautious about Service Packs; a few years ago, XP SP 1 messed with my computer. So download at your own risk, until Microsoft works out the bugs (more).

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]
Posted in browsers, Windows. Tags: , , . Comments Off »

Gaping Hole in Internet Explorer

In a rare move, Microsoft has released a statement notifying the public of a severe vulnerability in their software that they have not a fix for, yet.

Microsoft is investigating a privately reported vulnerability in Microsoft Video ActiveX Control. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. When using Internet Explorer, code execution is remote and may not require any user intervention.

We are aware of attacks attempting to exploit the vulnerability.

Our investigation has shown that there are no by-design uses for this ActiveX Control in Internet Explorer which includes all of the Class Identifiers within the msvidctl.dll that hosts this ActiveX Control. For Windows XP and Windows Server 2003 customers, Microsoft is recommending removing support for this ActiveX Control within Internet Explorer using all the Class Identifiers listed in the Workaround section. Though unaffected by this vulnerability, Microsoft is recommending that Windows Vista and Windows Server 2008 customers remove support for this ActiveX Control within Internet Explorer using the same Class Identifiers as a defense-in-depth measure.

Yikes.

Microsoft has a fix for this, but it will basically shut down ActiveX functionality for your Internet Explorer browser.

Other choices are to dump Internet Explorer altogether, and go with Firefox or Opera.

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]

Bing Bombs

Bing is the new search engine, released by Microsoft. I’ve been reading about it but I never checked it out thoroughly until today. It’s so great to see Google get some really healthy competition, and I had high hopes that Bing just do that… but there’s a caveat to Bing. :( CNet did a nice review of Bing, but I thought I’d throw in my two cents, too. First, the basics:

1.
Bing is easy to use. I did a quick search for “New York Traveler” to see where I showed up. My New York Traveler.net blog is an extremely popular blog, and I figure it should score high in the search engines. Bing nailed the phrase as #1 in the results, yay!

Photobucket

Google is much more tepid for New York Traveler.net. My old blog, New York Traveler at Blogspot, scores high as the #1 website for the phrase (and Blogspot is owned by Google), but New York Traveler.net doesn’t even show up on the first several pages. :-p I monetize New York Traveler.net, which Google does not like, so Google penalizes me for it. It stinks. So it’s really great to see my blog show up as #1 on Bing. And the NY Blogspot blog shows up as #3. So I think Microsoft has something good going here with Bing, as far as relevant and less arbitrary results.

2.
Bing took longer to load than Google. It took 1/2 a minute for Google to load the results, but I waited twice as long for Bing. That’s not too bad, it’s just longer. If you want to compare the two search engines side-by-side, there is a very neat website that allows you to compare Google and Bing in the same window.

Photobucket

3.
Bing is more pleasant to use. It has nice background images, and it’s easier to navigate. Google looks stiff and sterile in comparison. Also, if you hover your mouse cursor over a search result, Bing will pop up an excerpt of the text. It also does this for videos– if you hover over a video, it will start playing. This can be helpful if you want to check out content before clicking links, but it also causes a very unpleasant thing to happen– porn videos and text. Apparently, Bing has no real suitable filter for porn. Microsoft just released a special filter.

Microsoft says it has adjusted its freshly-launched Bing search engine to make it easier to filter out porn.

Adults-only images and video will be served from a separate domain, explicit.bing.net, so that content can easily be barred from Bing search results, according to Bing general manager Mike Nichols.

“This is invisible to the end customer, but allows for filtering of that content by domain which makes it much easier for customers at all levels to block this content,” Nichols said in a message atop an official Bing website.

Also, information about which domain potentially explicit pictures or video are coming from will be served up in a manner that makes it more apparent to content filtering software, according to Nichols.

A couple things about this– 1, Microsoft should have planned for this from the get-go. Porn is so prevalent on the Internet, it is unconscionable that it was “forgotten” as part of the plan. I really have to question Microsoft’s handling of the search engine. I think MS is light on porn– one look at their msn.com site reveals what their philosophy is about that kind of stuff, IMHO. 2, their advice to users to ban their newly-created separate domain, explicit.bing.net, is easily circumvented. 3, why have ANY porn on Bing anyway, at all?? The search engine is marketed by Microsoft as a “Decision Engine”, a portal “aimed at helping people make buying decisions, plan trips, research health matters or find local businesses.” Why have porn at all?

4.
I’m not going to use Bing for this reason (#3). I’m just going to ban Bing in my OpenDNS settings. This is what Kim Komando had to say about Bing, and I agree:

This problem has raised a storm of concern. Microsoft, which has big hopes for Bing, reacted quickly. It set up a separate domain— explicit.bing.net—to filter porn. You can block that domain in your browser.

Someone could still look up porn. All the results will still be listed. But explicit videos show up as black boxes.

I could show you how to set this up in a browser. But again, there isn’t a point. The black boxes still work. Hover the mouse over a black box, and you still get porn.

Additionally, the explicit filtering isn’t perfect. Bing fails to recognize some porn videos. Any way you block it, some crud slips through.

Your best recourse is to simply block Bing. I hate to say that. I want to like Bing. It does some innovative and useful things. You should see what it can do for travel planning. It’s sad that this single oversight ruins the experience.

I’ve blocked Bing at home and at the office using OpenDNS.

OpenDNS is a free DNS service and valuable tool. You can read about it here if you are interested.

As far as Bing goes, I think it’s final score is: mediocre. It’s pretty and fun to play with, but it isn’t that much better than Google, and the porn issue is an offensive and insurmountable obstacle. Bimg bombs. :-p

[Slashdot] [Digg] [Reddit] [del.icio.us] [Facebook] [Technorati] [Google] [StumbleUpon]