Slashdot Mirror


Taiwan Asks Microsoft To Open Windows Source

Andy Tai writes "According to this China Times article (in Chinese), the Republic of China government has asked Microsoft to open Windows source code. The official, Lin Jua-Cheng, in charge of the 'e-government' initiative, says many other countries have also sent similar requests to Microsoft. Lin explains that without Windows source code, the government cannot add custom firewall functionalities to Windows based systems in wide use, and that is very bad for the information security of Taiwan. Microsoft refused to publicly release the source in the past using reasons of copyright protection, but Lin emphasizes this request is reasonable since it is based on (government users') necessity." Read on for a bit more, too. (Can anyone suggest an online Chinese English translation engine that produces other than gibberish?) Andy continues "Lin points out that GNU/Linux systems, because of their freeness and high security (due to the availability of the source code, which can be modified to add firewalls and other security measures), have become widely used in government computer systems (especially in militaries and intelligence agencies) of many nations and the Pentagon, the FAA, and the air force of the U.S. Lin says the government cannot rely on a single vendor, and to promote the alternatives, the government has set up a 'Free (libre) Software Steering Committee' directing government efforts. The two aims of the ROC government's current software policy is making Windows source code openly available and the development of Free (libre) Software in Taiwan."

34 of 456 comments (clear)

  1. As much as we'd all like to see this... by Verteiron · · Score: 4, Insightful

    ... I think I'm going to have to say "fat chance". I don't believe that MS will reverse its stance on security-through-obscurity... not even at the request of a nation.

    --
    End of lesson. You may press the button.
    1. Re:As much as we'd all like to see this... by Micah · · Score: 4, Insightful

      Actually I think there's a reasonably possibility that Windows will eventually be open sourced, but ONLY IF it becomes apparent that Linux has a serious chance of taking over the desktop market (and I am personally 100% convinced that will happen; it's just a matter of how long it will take).

      Once that happens, Microsoft will pretty much HAVE to Open Source Windows to have a chance. Everyone will realize the benefits of OSS and they won't want to lock themselves into a proprietary platform.

      If/when Windows becomes OSS, I may or may not endorse using it. At that point I'll judge it vs. Linux technically.

    2. Re:As much as we'd all like to see this... by onion2k · · Score: 3, Insightful

      Once that happens, Microsoft will pretty much HAVE to Open Source Windows to have a chance. Everyone will realize the benefits of OSS and they won't want to lock themselves into a proprietary platform.

      You're assuming that the users would judge the OSS factor in their decision in choosing bewteen Linux and Windows. I doubt that, for 90% of people, the source being OSS would even enter into the choice. People decide on their OS by the price, availability of software, hardware requirements, and what their friends/clients use. If Linux does make a serious challenge to Windows then MSFT are much more likely to just try to compete on these factors rather than the ethics of software engineering. They may well make Windows free, but thats certainly not the same thing as OSS.

  2. don't beleive the hype... by bmajik · · Score: 5, Insightful

    I am highly dubious that the person quoted here is smart enough to write any kind of a firewall, much less a ruleset for linux or Windows. ... which is all secondary to the point i am going to make:

    In W2k and later, the entire network stack is completely pluggable. You can insert any layer you want to that sits between NDIS and a protocol driver, and you can create other layers as required. I'd be very surprised if they couldn't do everything required with windows exactly as it sits today.

    I think this is just making political noise, and not based on any shred of technical accuracy.

    --
    My opinions are my own, and do not necessarily represent those of my employer.
    1. Re:don't beleive the hype... by Spock+the+Vulcan · · Score: 5, Insightful

      Sure, you can insert whatever layer you want in the network stack, but the point here is, how can you trust the rest of the stack if you don't know what's in it? How can a government/organization/individual be sure that Microsoft didn't put in backdoors into their software?

    2. Re:don't beleive the hype... by 3-State+Bit · · Score: 5, Insightful

      so, you compile your compiler from source, right and build everything from scratch?

      wrong. you compile everything from source BY HAND.
      The first FORTRAN compiler was written in FORTRAN and compiled...by hand. Of course, without any optimizations. A very un-optimized and bulky and messy FORTRAN compiler now existed, and it was used to compile a clean version of itself from the source the reasearchers usd to create it. So you see, the first FORTRAN compiler was really a person. (This is taken from slashdot comments from awhile ago.)

      More famously, there was a version of a very popular C compiler that would put in a back-door whenever it noticed itself compiling a common bit of Unix login code, so that the author could use a certain password and get in on any system running a unix compiled with that compiler. More deviously, the author also made the compiler detect when it was compiling a version of itself and to add in the same code with which it itself was modified. (ie. 1, to change unix when it noticed it was compiling it, 2. to change a compiler, when it noticed it was compiling it, such that the changes make for a compiled compiler that both changed unix and detected/changed a version of itself, whenever it was asked to compile one.) In this way, the backhole remained through many versions of the comiler, since it did not appear in the source and could not be detected. Imagine if gcc 3.0 changed Linux every time it was compiling it, because it was compiled using gcc 2.x, which was compiled using gcc 1.x, which was changed in such a way as to change the gcc compiler, whenever it was compiling it.

      So changes can propagate through the executable compilers, from generation to generation, without appearing in the source. Unless you step through the compiler as it's compiling a version of unix (hairy stuff!) or of itself (even hairier!!), you'll never be any the wiser.

      Devious stuff!

    3. Re:don't beleive the hype... by bmajik · · Score: 3, Insightful

      you can't be sure.

      but then, you can't be sure of anyone elses software, either. The advantage of OSS in this facet has been debunked time and time again. Thousands of people that depend on sendmail, bind, tcpdump, libpcap, etc. The source is there for them to look at it. They look at it. They dont find anything because they're not looking hard enough or they're not qualified to do security analysis of software.

      Using publicly available tools you can single-step execution of the Windows operating system. You can get the names of all the symbols in the kernel. You can set kernel mode breakpoints on any peice of the network (and rpc/app) stack you want. It's not the same as having the source, but you can isolate exactly what the OS is doing at any time if you want to. And you can just disassemble the body of any function you like, once you've isolated it (which is easy, since Microsoft publishes full symbol information).

      An experiment i did in about 30 minutes of poking around (im a novice at kernel debugging) had me to a point where i could make a machine drop to a kernel mode debugger when someone connected to a SMB share on that machine. I could then examine the file they were looking at, what operation they were trying to do, etc etc.

      Naturally, this can all be automated. You could write a _kernel mode_ SMB debugger if you wanted to, and were worried about the CIFS implementation.

      I'm not even sure if debugging tools like that for linux _even exist_.

      And it's a moot point anyway. The overwhelming majority of people that think source availability is the difference between secure and insecure software aren't qualified to look at the source of either side, much less make objective measurements of the security/correctness aspects of the code in question.

      --
      My opinions are my own, and do not necessarily represent those of my employer.
    4. Re:don't beleive the hype... by alienw · · Score: 2, Insightful

      You are aware that trying to debug/reverse-engineer Windows code voids your rights under the EULA? Microsoft specifically prohibits disassembly of Windows code in their EULA.

  3. Re:Okay by klocwerk · · Score: 3, Insightful

    I think that the kind of custom firewall they want to implement has more to do with blocking access to certain sites than routing traffic.

    --

    "You worthless post!"
    -Shakespeare, 2 Gentlemen of Verona, 1. 1. 147
  4. Re:Okay by Havokmon · · Score: 3, Insightful
    Sure, because I need to look at the windows source to know that I need to enable HTTP to this server, SMTP to that server, etc etc.

    Nobody ever said there was a deep understanding underlying political motivation. :)

    --
    "I can't give you a brain, so I'll give you a diploma" - The Great Oz (blatently stolen sig)
  5. Will this mean... by BeBoxer · · Score: 4, Insightful

    If Microsoft actually goes along with this, will it mean that I'll be able to buy a CD-ROM of the Windows source code for $0.99 or whatever on the streets of China? Probably. Which makes me think that Microsoft isn't ever going to go along with this.

  6. Good ol' Slashdot Duality by NeuroManson · · Score: 0, Insightful

    First off, the chief purpose of the firewalling in question is to prevent Chinese citizens from accessing pro democracy sites outside of China, as well as any news sites that could be critical of China's political and social systems. Something that Slashdot has told everyone numerous times is "bad".

    Secondly, as Slasdot has told us numerous times as well, Microsoft's unwillingness to release their source code publically is "bad".

    Therefore, isn't the fact that Microsoft's closed source policies stand in the way of China's attempts at fullscale net censorship, a good thing?

    --
    Just because you can mod me down, doesn't mean you're right. Shoes for industry!
  7. Some geopolitical education... by aussersterne · · Score: 5, Insightful

    For those going on about the Chinese spy plane incident, rampant mainland Chinese software piracy, etc...

    Taiwan is not China. Taiwan is a very urban, very modern nation which participates fairly in the world economy. Much of the technology used in America and throughout the world is manufactured in and imported from Taiwan. Though "officially" it is a Chinese province according to the US government, Taiwan and China have a very antagonistic relationship with one another -- Taiwan wants independence from China and is basically already fully independent in every way except in name. China considers Taiwan to be a 'rogue capitalist province' and the two governments hate one another (going back to the battles between the Chinese nationalists and communists early in the 20th century).

    In fact, the US (if I understand correctly) has a very unusual agreement with Taiwan to jump to their defense if they should ever be invaded by China, even though at the same time the US also officially supports the "one China policy."

    It is entirely possible that Taiwan wants to enhance its information security to protect itself from mainland China.

    --
    STOP . AMERICA . NOW
  8. How often does this happen? by mao+che+minh · · Score: 5, Insightful
    I want to know what other governments (as mentioned in the post) have submitted similar requests to Microsoft. I would imagine that this can't be an all too uncommon occurence when it comes to Microsoft. Afterall, this is a very legitimate concern for all governments (and it should also be a point of interest for all businesses that handle sensitive data).

    Microsoft products should never have been chosen for government implementation to begin with.

  9. Geography Lesson by Kamel+Jockey · · Score: 5, Insightful

    The posting refers to Taiwan, not mainland China. Taiwan, also known as the "Republic of China", is not the same country as China, also known as the "People's Republic of China". The former is a peaceful democracy, the latter is a belligerent, brutal totalitarian regime.

    --
    In case of fire, do not use elevator. Use water!
    1. Re:Geography Lesson by taweili · · Score: 2, Insightful
      To be fair, only recently could Taiwan call itself a democracy.

      The democracy in Taiwan is a joke. The political platform in Taiwan look like a bad Jerry Springer show with meaningless and sensational catching pharse spiting out from smart ass politicians in the TV talk show.

    2. Re:Geography Lesson by mgs1000 · · Score: 2, Insightful
      Just to clear up a few things:

      1.Since about 1990,the ROC constitution no longer claims the mainland.

      2.The PRC has never recognized the legitamacy of the ROC on Taiwan. Even the Chinese newspapers, when discussing Tawain's leaders, place their titles in quotes. i.e. "President" Chen

      3.The comparision with Florida being ruled by another government is pretty bad too. A better comparision would be if the Confederate leaders fled to Cuba after the Civil War and claimed it was part of the USA (or CSA), since Taiwan was ruled by the Japanese until the end of WWII

      4. 400 ballistic missles in the Fujian province pointed at Taiwan is not belligerent? The "incident" in 1996 when China launched the missles over Taiwan during their presidential election wasn't belligerent?

  10. But Why? Sounds so bogus to me. by standards · · Score: 2, Insightful

    I don't see the argument that Taiwan needs Microsoft to publicly open the Windows' source code so that Taiwan may add custom firewall software.

    Why can't Taiwan privately contract with Microsoft to add such capabilities? Does Taiwan seriously want to use Windows for it's most secure information, and therefore need to know all the internals to Windows? And to release the details to the masses? That seems a bit unrealistic.

    Don't get me wrong - I'm a big fan of open source. But this one sounds more like industry politics than a technical shortcoming.

    I say open up Window's source code in order to curb Microsoft's monopolistic stranglehold on business and individuals and government. Not to add "custom firewall software for Taiwan".

  11. Interesting news. by Dot.Com.CEO · · Score: 3, Insightful
    First of all, China is a huge, EMERGING market. This means that most people there do not have PC, but they are starting to buy them. Microsoft cannot just say "well, yes, we would like to help you but, actually we won't".

    Secondly, China will much rather build its own version of Linux (it already has a project underway). It makes sense for them. If you are starting from scratch, you do not have the biggest problem that prohibits Linux in the office: retraining of non-IT personnel.

    Microsoft has not been the first one to feel the wrath of China. China has developed their own x86 chip and, thus, do not depend on either AMD or Intel. They, in fact, are in a position to make 100% Made in China PCs.

    --
    Mother is the best bet and don't let Satan draw you too fast.
  12. I'm laughing all the way to the street vendors... by mr_gerbik · · Score: 2, Insightful

    Yeah, Microsoft is going to open the source to Windows for a country that has a 98% software piracy rate. A country where the latest version of Windows will run you $5 on any street corner.

    -gerbik

  13. Re:Remember Tawian dosent like linux by AKnightCowboy · · Score: 2, Insightful

    That's a pretty stupid reason to not like Linux. Maybe you mean they don't like Red Hat? I still find it funny that a communist country like China can claim to be the "Peoples Republic of China". They're more like the "Communisty Party Dictatorship of China". Oh btw trolls, don't even start trying to defend that horrible government. The people are very nice but the system of government is horribly cruel and inhumane.

  14. Re:Lame by SirSlud · · Score: 5, Insightful

    > why not ask Microsoft to create that instead?

    You're right. And instead of the Army servicing their own F14s, the hoods should be locked shut, and they should outsource all their service and development to Kinkos. And police shouldn't be allowed to tamper with their bullet proof vests to confirm that there really is kevlar in them. They should just trust the company that made it for them.

    Am I the only person who understands that software companies build software .. this isn't like some magic voodoo cult. They're just building something. Why shouldn't I be able to actually confirm that what I bought is what I'm getting, and why shouldn't I be able to customize that product I just bought? Why the hell should I be forced into forking over more cash when I can just do the goddamn work myself.

    The gall people have. When folks bitch about the government wasting money, your proposal is the PERFECT example of wasting money. Why waste the money when you can do it in house? WHY, GOD, WHY?

    WHY do we support the abject protection of intellectual 'property' in order to keep the market functioning when that goal of protection can be used to tamper with market forces? Think about it; a market isn't just somewhere where you can get what you want. Its important that you have the option _not_ to be forced to go back into the market when you can just do the work yourself.

    --
    "Old man yells at systemd"
  15. I think there's something under the surface here.. by airrage · · Score: 5, Insightful

    Honestly, I don't think the article is as straightforward as it seems. We must ask, why even ask that of Microsoft? I believe the answer is politics. Somehow, there is a struggle going on over there, dealing with which road to take technically. I think Microsoft is probably over there pitching and wooing as hard as it can, but Taiwan laid down the guantlet: open up or your out.

    I would also assume that Microsoft has its supporters in governemnt, and this official is simply trying to keep the argument on it's technical merits so as not to upset any politicos. It's framed in such a way, that it's essentially a state-security issue: if Microsoft doesn't open the code, then we are more open to [Chinese] hacking and snooping. Who can argue they're not in favor of a more secure state. Actually, very, very smart on this official's part. Played this way, it appears as though it's Microsoft's problem and not about any particular government official.

    There are probably many other culture differences that we cannot even begin to understand.

    --
    "This isn't a study in computer science, its a study in human behavior"
  16. Comment removed by account_deleted · · Score: 5, Insightful

    Comment removed based on user account deletion

  17. Trust me...Says the spider.... by Tungbo · · Score: 5, Insightful

    Look. You may not balance your checkbook every month. I know I don't. I DO trust that my bank will do the arithmetic correctly most of the time.

    However, would you like to get a bank statement that just list your beginning and ending balance?

    Not me and I doubt you would accept it too.
    While I don't check the arithmetic usually, the bank knows that I CAN CHECK it any time I want. Thus, they work to make sure that there're no problems.

    Similarly, knowing that the source code is visible makes the vendor think carefully about what to put in it in the first place. And that's worth a lot.

  18. Don't Open the Source by Moirke · · Score: 3, Insightful

    I may be alone here, but I do not think Microsoft should open its source code. I believe if Microsoft did publicly release Windows source code, every open source project would live in fear of a lawsuit. Microsoft's would sue everyone that released anything for copyright infringement.

  19. Re:Lame by SirSlud · · Score: 5, Insightful

    > Why doesn't everybody write their own OS, server and client to do a shopping cart on the web?

    Because most people cant. Why doesn't everybody outsource the prodecure of putting the toilet lid down when they're done? Because they can.

    Point is: if you can do it (and there are fuckloads of cases where its cheaper to do something yourself), you shouldnt be forced to buy into the market. Thats not a free market, thats a free market youre not free to avoid when it makes you wealthier (one of the goals of healthy capitalism, no?)

    --
    "Old man yells at systemd"
  20. Eminent Domain by namespan · · Score: 3, Insightful

    The local city government can eminent domain away property rights of a street full of homeowners to accomodate the construction of a freakin' Costco. The United States government can install puppet juntas in Latin America to prevent the spread of communism.

    Taiwan getting a looky at the the Windows source code to protect their national security from a large, powerful, local, and real communist threat seems pretty tame.

    --
    Libertarianism is rich wolves and poor sheep playing gambler's ruin for dinner.
  21. Re:Microsoft and Taiwan by user32.ExitWindowsEx · · Score: 1, Insightful

    That's not 1337 enough.

    74IW4N: P1Z GIV3 UZ 411 UR 5RC C0D3Z
    MICR050F7: 0MG!!11!! FUX0R J00!
    74IW4N: 0MG W3 CU1D C0NBIN3 4R3 M4D 5KI11Z 4ND B3 1337!
    MICR050F7: 0MG!!!! Y3Z!!11!!!!!!!

    --
    "Evil will always triumph because good is dumb." -- Dark Helmet
  22. Hmm custom firewalls on the desktop by nurb432 · · Score: 3, Insightful

    This way they can control content even if you get an illicit internet connection out of the country and by pass the national firewall of content..

    Interesting concept.. near total control of incoming information..

    Just add a dash of DRM to control local content.. instant 100% suppression of 'non authorized' information.

    --
    ---- Booth was a patriot ----
  23. Maybe they are looking for NSA/CIA backdoors? by CSG_SurferDude · · Score: 3, Insightful

    Maybe they just want to compile it themselves to make sure there aren't any NSA/CIA/FBI backdoors installed in it.

  24. This is a PR stunt by Duderstadt · · Score: 2, Insightful
    Really, this is nothing but a stunt by someone who wants to promote Linux / OSS software. Software that will probably be developed by some Taiwanese company with political influence.

    The fact is that Microsoft has granted thousands of shared source licences. I have no doubt that the ROC can get one. But that is not what the ROC is asking for. They obviously want permission to modify the source and create derived apps from it.

    And of course, MS is not going to allow that. No vendor of proprietary software would.

    There is something else as well. For those who are unaware, NT is highly customizable at compile time. The gov't (US) and many major corps (eg, Boeing) request NT with various bit flags set at compile time. There is no reason that the ROC could not do the same.

    The ROC wants the source not to see, but to mess with and use in their own apps - perhaps even OSS apps. Is it any wonder that MS would respond FU?

  25. Re:Microsoft and Taiwan by Anonymous Coward · · Score: 1, Insightful

    You've still got some right letters in there. Try changing "W" to "\/\/", "M" to "|\/|", "P" to "|>", "K" to "|", and "F" to "1'|\/\ 4 |=|_||1|\|6 |}|_||\/||34zz, j00".

  26. Re:Microsoft and Taiwan by Doomrat · · Score: 3, Insightful

    Well, you lose a lot of l33ticity when you convert it from a non-English language.