Slashdot Mirror
The Power of Palladium
phriedom writes "Salon has coverage of Palladium which gives first page coverage to the idea that Palladium is designed to kill open source software. My favorite part though is on page two, where the Microsoft apologist says that ones view of Palladium 'depends on what you believe Microsoft's long-term aims are. If you believe it's to stimulate commerce and stimulate security, it's a step in the right direction ...and if you're perhaps given to suspicions that Microsoft always makes decisions with the aim of frustrating competitors of the Windows empire rather than for the good of consumers, you might have a different view of the same architecture.'" Wired also has a story claiming under-the-hood exposure to Palladium, although it doesn't seem to have much information that hasn't come out already.
Update by J : Steven Levy's Palladium story, which we linked to in an
earlier article,
has allegedly been
pulled from MSNBC's website.
Anyone know if there's a simple explanation of this?
"perhaps given to suspicions that Microsoft always makes decisions with the aim of frustrating competitors of the Windows empire rather than for the good of consumers"
Yes, I believe that was the verdict.
It is 3Q 2030.
You're arguing with your wife again. It seems she's missed her spending quota again this quarter. A proud patriot, you have no problem spending 85% and sometimes 90% of your income on consumer goods, yet she can't manage to spend even close to the 75% required by law. It's that foreign mentality, you suppose--that's what happens when you are educated overseas and without the benefit of a corporate sponsor. You have to remind her that if the Internal Consumer's Service (ICS) catches her, she'll be doing time in Philip Morris(TM) Prison like her uncle.
Oh well, hopefully a night at the town's AOL-Time-Warner-Clear-Channel-Blockbuster(TM) Authorized Media Distribution Center will smooth things over with her. That reminds you--you need to have your eye- and ear-implants inspected for this quarter again, otherwise you won't even be allowed in tonight.
You haven't attended church services for a while. Although your wife is a devout follower of God's Customers(TM) and shops in the Church Store at LEAST five tiems a quarter, you're not yet convinced that converting from Consumers For Jesus(TM) was that sound an investment.
Your son Rick has just graduated from the local McDonalds(TM) High School. You want him to go to Pepsi(TM) University like his sister, but he wants to go to Coke(TM) College. Not that it matters--the permits you get at either school are the same. Although he really wanted to attend Stanford(TM), his corporate sponsors rejected that proposal, based on what it might do to his credit rating.
Your youngest daughter just graduated Pepsi(TM) U. It was expensive, but she is all set now, having received a Creative Thought Permit and a Entrepreneurship License. On top of that she's accepted a job at Fortune 10 corporation. Of course almost everyone works for a Fortune 10 nowadays, there being only thirty-some corporations left. It's too bad she had to sign all those NDA's though--you'd really like to be allowed to know where she would be living and how to get in touch with her. Ahh well, it's the price you pay for our corporate security.
Your older daughter, after twenty quarters of employment, was finally permitted to tell you that she is working in middle-management at AT&T. Of course, every job in the United Corporations of America is middle-management. The cheaper--skilled--labor is all outsourced to Those Other Countries, whatever they are called. In ten more quarters, assuming her credit rating remains good and she has attained Shareholder status, she'll be allowed to talk face-to-face (no encrypted channel) with us again!
Apparently, her five year old daughter has been grounded again, this time for racking up a $6000 fine--singing "Happy Birthday(TM)" at a party without a Media Distribution License. She really needs to be taught a lesson--that as a patriotic Consumer of the UCA, she needs to respect the rights of Shareholders and property owners. What a dangerous thoughts she has! She thinks she should be allowed to say whatever she pleases, no matter what it does to someone else's portfolio! No one can get it through to her that terrorist ideas like that will land her in one of those "special" schools--and she'd be subjected to a lower quarterly limit on all her credit cards.
Fax from your wife--she'll be late tonight. Corporate HQ has re-instated fourteen-hour work days until the end of this quarter. It's too bad she's not allowed to quit her job--you could get her a pretty sweet management position any time in your department at Microsoft.
This document is hereby released to the public domain. You may (and are encouraged to) reproduce, republish, read, modify, and/or archive it without limitation.
Read this story from Zdnet: News: Microsoft: Palladium not just for Windows
Anytime you focus that much control through one agency, you're asking for trouble. Funneling it through a for-profit company is double the risk.
The Mongrel Dogs Who Teach
For all its faults, Microsoft is not known for kicking its customers in the teeth.
Is there some other Microsoft out there? The one we all know and love is well known for kicking its customers in the teeth.
This guy obviously has not done any research into Microsoft's history.
Apparently Microsoft met with the EFF to discuss Palladium. Mr. Schoen wrote up his notes from the meeting.
His notes are more technical in nature and he doesn't make much in the way idle speculation, so they tend to disagree with much of the reporting that's shown up on slashdot.
It should be very clear that Microsoft is very much interested in using experienced gained making a closed system with licensed developers (the X box)and approved software and moving that to the business and consumer desktop OS.
This is the ultimate in hubris. They are in the penalty phase of a federal decision that seeks to punish them for doing the exact same thing with their restrictive licensing. Now they want to have even more restrictive licensing enforced by software and hardware that makes certain nothing unauthorized by them runs on windows.
Or Maybe they are just shooting the moon on this one, so their other business practices look nice in comparison. Either way this stinks.
When Intel came out with the uniquely identifiable number in the Pentium III, of course customers didn't care, right? When I do have to run windows, and need to install drivers, things that aren't signed are generally the things that I need to use! Why in the world would I want any sort of chip that could possibly restrict this sort of thing. This could even be expanded to be "you can't run this code on your machine unless redmond has signed it"
Well, from the sounds of it. This is a perfect attack on the open source movement.
:-)
While absolutely anyone will be able to program code for the Palladium system. Since anyone can have a licence. (I believe Microsoft would let this get by). Only the open source people wouldn't be able to handle the new licence everytime. Thus Microsoft maintains control in two ways.
1. The only main threat to MS's OS monopoly right now is Linux (and maybe a tad bit of Apple, which they own a seat on the board for.) This isn't a huge threat, but if it takes off, Windows loses it's viability. Then MS is screwed. With Palladium, only MS OSes(and MS supported OSes) will be able to handle the Palladium hardware, and the only competition that could potentially cause problems is blocked because it's unreal for it to be signed every single time.
2. If MS decides to spread their wings some more. They will have the ability to put loopholes into Palladium to make it harder for competitors to code. They have done this before with Windows, making changes that purposely are damaging to competitor software (I know, I have had to program around those changes.) I wouldn't be surprised if they used this to accomplish the same thing.
No matter what though, it does show an evil injenuity that I haven't seen from MS since the days of OS/2, and even all the way back to MS/DOS. I guess OS is having the effect of forcing these companies to compete. Since people have realized the software they pay for is as good as software people give away for free.
~ kjrose
an interesting, detailed perspective on Palladium from someone who worked inside MS on some related stuff. TCPA and Palladium: Sony Inside
-- -- -- --
"The U.S. Constitution - not perfect, but its better than what we have now"
Oh, wait. They were. So perhaps it's not unreasonable to be suspicious of their motives.
The Mongrel Dogs Who Teach
Fee-C's (Fee-based Computers)
Copyrights, Patents, Trademarks: temporary loans from the Public Domain, not real property ("intellectual" or otherwise)
First of all, I don't trust Microsoft at all.
Given that, I've read all of these articles floating around and in principle I have no problem with a system of authorized applications.
However, the one thing I haven't seen is any indication that I myself will be able to authorize programs on my own computer. In my opinion, this would allow geeks to play with their own programming, download open source projects, etc. while still enjoying the knowledge that unless a program has been authorized by a signature authority or by themselves, it's not going to get a toehold in their machine.
If I'm beholden to the authorities to approve what I want to use, then I'm never upgrading. If however I'm allowed to authorize anything I might write or download then I don't have an objection to the principle.
The devil is always in the details, however.
The initiative, called Palladium, after the mythological statue that defended ancient Athens against invaders, sits on a set of technologies that have long been in use
Not to nitpick, but I AM tired of it... the Palladium was a small statue of Athena in the city of Troy, not Athens - it was stolen by the Greeks very near to the end of the Trojan War. It was the basis for the whole Trojan Horse bit. The explanation the Trojans received when they found the horse was that the theft of the Palladium by Odysseus had so infuriated Athena that the Greeks had left the horse to appease her wrath. The idea was then implanted in the Trojans' heads that the Greeks very much did NOT want the horse dragged into Troy, for then Athena would favour the Trojans and might kill all the Greeks on the way home. (Which, ironically, she and Poseidon largely did anyway.) The Palladium is generally held to have been taken by Aeneas on his flight from Troy to Italy, or maybe by Diomedes to Sparta, but never Athens.
Are you kidding me? Planned obsolescence? Squeezing consumers dry with each "upgrade"? Bundling an insecure scripting language with almost EVERY product it produces, thus singlehandedly giving the antivirus industry a job? Snuggling closer to content providers every day at the expense of individual users' rights? Further solidifying its monopoly, even after it was supposedly "disciplined" by the DOJ?
Maybe this guy sees something I don't. ;)
PrisonerCX
I read it. It's silly. They're implying they will allow non-microsoft operating systems to use their palladium stuff.
But they clearly couldn't allow open source operating systems. So who does that leave? There are no other x86 operating systems to speak of except the open source ones, unless Palm for some reason decides to do a BeOS revival. Maybe MS will release a doctored version of freebsd with all the crucial kernel bits closed-source just to prove look, we're leteting competitors in? And what would be the point of offering Palladium tech licensing to other operating systems, when you couldn't run Palladium software anyway (because the Palladium software is win32??)
*Could* they allow open-source operating systems? How could Palladium chip manage to function when the operating system has been altered specifically to allow you to run things without consulting the Palladium chip? Does the Palladium chip refuse to let the machine boot unless the operating system itself has been signed? How does it read the disk to see if the operating system is signed without letting the operating system partially boot first? Please explain.
Yeah, yeah, DMCA, whatever. There's a limit to what the DMCA can do before it gets hauled into court and struck down. The general public can't understand all this gunk about linux and kernel drivers, but they WILL understand "This law makes it illegal to distribute this 40k file containing a long set of instructions in english, because this other program can convert that set of instructions into a patch for windows that will let you back up files for Palladium-enabled programs in windows." Very few people actually need or want to run DeCSS. If palladium succeeds, lots of people will want to circumvent it.
Is anything above wrong? There ARE reasons to circumvent palladium, right? I think MS's greatest triumph in any case is when they can make it so everyone is talking about their new technology but no one is sure what it is, and that's the case now. Is it or is it not true that Palladium would allow you to create an application that WOULD NOT run unless Palladium were enabled and in control of the operating system? Is it or is it not true that Palladium would create hard disk sectors and third-party peripherals that couldn't be accessed unless Palladium were enabled and in control of the operating system? These news articles are all so vague. Enlighten me.
The big problem with DRM is the dichotomy between trust and freedom.... if we're going to have signed code and signed media, there's going to have to be some barrier to getting signed. This signing, however, reduces the freedom to release code or media... in effect, restricting ALL expression, not just expression of copyrighted works or viruses.
And if history is any indication, what will the signatory barrier be? Just a "reasonable" fee...
The trust/freedom dichotomy is the biggie. If there were a way to resolve that -- perhaps the "2600 can sign things" idea mentioned -- letting DRM come is not a big deal.
Libertarianism is rich wolves and poor sheep playing gambler's ruin for dinner.
1. Write an application that runs unsigned applications. Sign that app, never sign anything else again.
2. OK, let's say you have to sign every process. That means you have to sign every version of a DLL. MSFT won't just be alienating OSS developers if that happens.
3. Under this regime, security is only as good as the CA. Sure, some CA's will charge a lot of money because they are "reputable", but how hard/expensive is it to run a certificate server anyway? From what I've heard, not very. It's just that nobody does that now because there isn't a need. Something like this would just cause orgs like the EFF, GNU, perhaps others to run free CAs, or even CAs the are dummies designed to fool the OS into believing the software is signed. Then the orgs and MSFT can sue eachother for a few years, and by the time the case is settled it'll be a 1 inch blurb in the business section and a few lawyers will have new Lexus automobiles. Nothing new here.
I don't know about you guys, but I never even bother reading those little pop-ups that come from signed code, even when it has an error, and I have never been compromised by such code. Why? Because trusting code you get from ibm.com is safe, and trusting code you get from deadalienhacker.org isn't. In other words, security is verified by the reputation, integrity, and character of the authors. My... what a novel concept. :)
For all intensive purposes, "whom" is no longer a word. That begs the question, "who cares"?
Here's the simple explanation for why MSNBC pulled the article:
It's a Newsweek article.
Newsweek charge for archive access.
The article is now over a week old, and has been moved to their archives.
Simple. If you want to get the article, you can still buy it from Newsweek for $2.95, or for a lot more if you want access to their entire library of stuff.
You can still find it if you go to www.newsweek.com , and search the archives for Palladium.
Simon
Coming soon - pyrogyra