Slashdot Mirror


Microsoft Opens Code Just Slightly More

ctar writes "This story on Bloomberg.com details Microsoft's new program to open the source to parts of Windows in order to compete with Linux, especially in the government sector. Microsoft's spokesman is making these announcements directly: They say governments involved will be invited to Redmond to meet w/ security engineers, and view testing procedures. Countries will also be able to incorporate their own encryption schemes 'based on Microsoft's software'."

33 of 317 comments (clear)

  1. One Question by The_Shadows · · Score: 5, Funny

    Why does the government need the source? I mean seriously, it's not like knowing how MS wrote their version of solitaire is going to help much.....

    Sheesh. :)

    1. Re:One Question by Anonymous Coward · · Score: 5, Funny
      I know your comment was meant to be funny, but as a government employee I have to say that I'd like to see the source of sol.exe (Solitare). I think it's coded in a way that you CANNOT win twice in a row. And it seems to degrade as you play it more without stopping.

      I just want to know if this was on purpose or if the Windows may have started to not only develop intelligence but decide to gang up with my boss against me.

    2. Re:One Question by Anthony+Boyd · · Score: 4, Interesting
      Why does the government need the source?

      Because some governments believe that Microsoft is in bed with the US government. It doesn't help that a couple years ago, MS admitted there was a backdoor in Windows for some government agency. Anyone remember which one? The NSA, maybe? Anyway, if you're the leader of a NON-US country, do you want the US government peeking in at your citizens and possibly your government officials? I suspect those other countries want to not only see the code, but to compile it, because you trust no one else to leave the code untouched.

    3. Re:One Question by Tony-A · · Score: 5, Insightful

      The problem is that it's the source Microsoft wants me to see when Microsoft wants me to see it. The advantage of Open Source is that I get to look at whatever I want to look at, whenever I want to look at it, and for whatever lame/stupid/paranoid reason or lack of reason I choose.
      Now I don't really know what to look for, so if *I* don't see anything wrong, it doesn't mean all that much. But. There are people who do, and people who are paranoid, and people who will scream their heads off if there is *anything* suspicious, particularly anthing that *should* be there but isn't.
      What Microsoft is doing will help. A little. But there are too many ways that what I'm seeing is a *sanitized* version of the source, that I'd still be more than a little bit suspicious.

  2. I doubt they can do much with this... by irabinovitch · · Score: 4, Insightful

    Im sure someone will get some use out of this, but source code wont do much good unless you can make modification. I mean maybe you can get a better grasp on how some of their stuff works, but the real advantage to open source is that anyone can change it and add to it.

  3. I can't see how this is good by The+Bungi · · Score: 5, Informative
    While I would personally love to see some of the Windows code (I'd kill for a peek at the COM+ marshaling engine) I can't see how this is going to help anyone. it's not like you can find a bug and recompile the kernel, and I've always had a bit of reservation against providing Microsoft with solutions to problems in their own products. The MTS/IIS4 timeframe left me pretty much soured on that whole thing.

    Still, if they're going to open up stuff I'd say let me look at IIS, MSMQ, WMI, COM+ and all that other middleware that I tend to hit a lot more... looking at the kernel would be an educational trip - but only that. Not really useful per se.

  4. Open? by Guido69 · · Score: 4, Insightful

    "Ten countries or agencies including Russia and NATO have already signed agreements..." (emphasis mine)

    Signed agreements? Is this really open? I don't remember signing anything before being able to look at RedHat source...

    --
    - If we aren't supposed to eat animals, then why are they made out of meat? - Steven Wright
  5. How arrogant by core+plexus · · Score: 4, Interesting
    Man, that is some arrogance: "They say governments involved will be invited to Redmond to meet w/ security engineers, and view testing procedures. Countries will also be able to incorporate their own encryption schemes 'based on Microsoft's software'."

    So, Microsoft need not be bothered going to your country, just send some folks round and we'll give them the hundred ruble tour. When it's over you can use our software, " to help governments and agencies such as Russia and the North Atlantic Treaty Organization improve computer security". How, by installing Linux?

    Best part is that Microsoft is feeling the heat, which must be, by the laws of thermodynamics, a good thing for Linux. And maybe even for Microsoft users.

    Fight with computer brings SWAT team

  6. Microsoft is missing an entire dimension... by EvilTwinSkippy · · Score: 4, Insightful
    M$ seems to not understand that viewing the source is only one third of the Open Source equation. The other half is being able to modify the code, and distribute those modifications.

    Linux would be some grad student's pet project were it not for the fact that Linus opened the code for discussion, so to speak. Many of the early ideas for the Linux kernel were inspired by the Minux operating system, published in book form by Andrew S. Tanenbaum. The source code was there for Minux, published and documented. I have a copy myself from my days as a computer engineering student.

    Why don't we use the Minux kernel? Well for starters, Tanenbaum (at least at the time) was a bit of a minimalist. His goal was to create a toy operating system to teach operating system design with. He didn't want to hear about adding drivers or alternate file systems. And for every good reason, you have to master walking before running, let alone flight.

    Enter Linus. He develops a new kernel, but instead of publish it in book form, he released it on a newsgroup and asked for suggestions on how to improve it. The rest is history, or at least in the CVS logs.

    --
    "Learning is not compulsory... neither is survival."
    --Dr.W.Edwards Deming
    1. Re:Microsoft is missing an entire dimension... by MalleusEBHC · · Score: 5, Funny

      M$ seems to not understand that viewing the source is only one third of the Open Source equation. The other half is being able to modify the code, and distribute those modifications.

      Judging by your math, I'm going to say you are related to Yogi Berra somehow. ;)

      (For the humor impaired, yes I realized what he intended to say.)

    2. Re:Microsoft is missing an entire dimension... by Tim+C · · Score: 4, Insightful

      M$ seems to not understand that viewing the source is only one third of the Open Source equation. The other half is being able to modify the code, and distribute those modifications.

      No, they understand that perfectly well. However, why on Earth would they want to let people distribute modified versions of their software?

      Microsoft makes money by selling software. If they let people distribute even unmodified copies, they'd make less money.

      People, especially governments and large organisations, have started publicly saying "Hey, Linux is free, and you get to see the source code; maybe we should switch?". In answer to this, Microsoft has said "Well, you know, we can't do free, but our products represent extremely good value, and interoperate and integrate much better than Linux and its applications; how about we let you see some of our source, would that make you happy? Just sign here..."

      Soon enough, those orgs that have the source will start making noises about making modifications, strictly for their own use. Maybe Microsoft will say okay, maybe not. I doubt very much that we'll ever see the day when they say "Oh, and of course you can give it away to other people!". It's just not the way they do business.

    3. Re:Microsoft is missing an entire dimension... by boots@work · · Score: 4, Interesting

      I don't know how many people care about just seeing source code, under glass as it were. People and companies tend to be interested in free software either for the sake of freedom, or because it's free, or because they can take it and make something better. Being charged for look-don't-touch doesn't really satisfy any of those desires.

      I suppose people wanting to do security audits might care, but really the number of organizations in the world with the budget to seriously audit Windows can be counted on your fingers. I think even most government bodies apart from the spooks wouldn't care much -- after all, they're all using Outlook now despite the known problems. Auditing isn't going to tell them anything new.

      I suppose it might be helpful in debugging problems in interaction with Windows. You can imagine device vendors wanting more access than they have at the moment. But I suspect the NDAs will be pretty restricted. Debugging Samba interoperability is probably right out.

      We're in the early stages of Microsoft's stumblings towards respecting the freedom of their customers. When democracy won out in eastern Europe the countries weren't destroyed outright, but rather they came around to a different way of working. (Imperfect analogy, but humor me.) Satisfying as it might be to imagine Microsoft bankrupt, a more likely optimistic outcome is that in a few years they'll be a semi-open-source company, along the lines of Sun or IBM.

  7. Warning, developers! by Anonymous Coward · · Score: 4, Interesting

    If you ever want to work on any open source project that might be in an area where MS has a similar product (which covers just about everything), DO NOT look at any MS source code. Before you can look at their code, you have to enter into a license agreemnt or a contract of some kind with them. I haven't seen this agreement, but you can be sure it contains lots of provisions defining everything in the source code as trade secrets, with all kinds of provisions for enforcing it, and all kinds of waivers of the non-MS person's rights. Being under such an agreement would mean that it might be legally risk for an open source project to use you or your work. So, don't agree to that and don't look at their code. This whole MS "shared source" is a Trojan horse, I believe.

  8. safari publicity kill? by solferino · · Score: 5, Interesting

    i'd just been reading coverage on apple's new safari browser and thinking how it was a significant 'hit' against microsoft internet explorer strategies as the boost given to 'the other' free software rendering engine (khtml) has now made complying to web-standards that much more important

    wondering how this release was impacting microsoft's share price i went over to yahoo finance and was bemused to see that it was slightly up - and then noticed the links to news stories lower on the page detailing microsofts announcement

    i can't help wonder if the announcement was timed to take some attention away from the extremely significant move by apple to move it's sizable number of users from a proprietary based browser to one at least based upon a free software engine
    - microsoft must have worked out what was in the works some time ago (the project has been a year in dev) and macworld would be the obvious announcement time

    i'll let others analyse and discuss the significance of this move by microsoft - and by the way i agree with those who contend that microsoft is not 'the enemy' and that as longer as we keep true to our values and keep doing what we have been doing all will continue to be well in free software land, and ripples from the movement will continue to spread through the software world from our activity whether we plan to make a splash or not

    - but watching microsoft sure is great soap opera :)

    p.s. i have been using the term 'free software' in the above post but am unsure of the exact license that khtml is under (i searched and couldn't find the info) - anyone who knows?

  9. "Open Source" vs. "Free Software" by gnujoshua · · Score: 4, Informative

    I think this is a good reason why the term "Open Source" can be extremely misleading. Next thing you know, we will have an "open source" version of windows 2004---however, the license agreement restricts anyone from incorporating their source code into non-microsoft programs, and they will sue anyone who tries to. However, they can go ahead and call their software "open source," because they are making the source code available to the public.
    This is damaging! We must not group together "free software" programs with "open source" ones, for this very reason! The more we call "Linux" Open Source, the more we will be giving Microsoft free advertising for their "open source" programs that will surely be coming out in the future. Please call GPL'd and GPL compatible software "free" or "Libre" in the least, so that we can make clear distinctions between "open source" and the freedom that come's with GPL-like programs. Thank you.

    For a more clearly articulated argument see: http://www.gnu.org/philosophy/free-software-for-fr eedom.html

    1. Re:"Open Source" vs. "Free Software" by Arandir · · Score: 4, Informative

      I think this is a good reason why the term "Open Source" can be extremely misleading. Next thing you know, we will have an "open source" version of windows 2004

      I think this is a good reason why the term "free software" can be extremely misleading. Next then you know, we will have a "free software" version of Internet Explorer.

      p.s. The above is an example of sarcasm. If you are a regular Slashdot reader, the concept may be unfamiliar to you. I suggest a dictionary.

      p.p.s. Speaking of dictionaries, look up "free" while you're at it.

      p.p.p.s. Funny isn't it how download.com offers thousands of "free software" downloads of proprietary shareware?

      --
      A Government Is a Body of People, Usually Notably Ungoverned
  10. Re:Something to Think About by IntlHarvester · · Score: 5, Interesting

    Microsoft might not realize it yet, but it's only a matter of time before Windows sourcecode is Open (as in VMS - read only).

    Really, what have they got to lose? Windows is already pirated like crazy, and they arguably have a better core system than any of their competitors anyway. Why not counter Linus Hype with a litte Dave Cutler?

    They've already run through their shared source program with various universities and no dirty laundry leaked out. Having published source never hurt IBM or DEC. They should do it.

    --
    Business. Numbers. Money. People. Computer World.
  11. Showing the code not enough by Milo77 · · Score: 5, Interesting

    The reason many people think open source software should be used in gov't is so contractors can't sell closed sourced solutions to the gov't that would require the gov't to go back to the original contractor everytime a change is needed. In other words, it is more cost-effective from the tax payer's point of view. If the code modifications can be made in house or there is a lower bidder this is better for the taxpayer (cost wise). Nothing MS will ever do will allow a gov't to do this. They may let you "see" some of the code and perhaps allow for encryption plugins (or what have you), but they'll never provide a license that says "this code is yours, feel free to make your own modifications."

  12. Linux/OS Effect by Hasie · · Score: 4, Insightful
    Even if Linux and the rest of Open Source disappear tomorrow, they will have left their mark on the world. Even the mighty Microsoft, one of the largest and most powerful companies in the world, is feeling the pressure. This can only lead to good things.


    Yes, this arrangement does not go as far as most of use would like, but it is a step in the right direction. And more importantly, it is a step that would never have happened without Open Source.


    Hats off to Stallman for starting the dream and everyone who has supported it.

  13. And during those visits to Redmond... by djupedal · · Score: 5, Funny

    ...anyone drinking the water that is placed on the tables in the conference rooms should know that it will take 9 to 12 months for the effects of the spiking to wear off :)

    By that time, contracts will have been signed and monies moved about according to MS's will.

  14. the problem is dependency by g4dget · · Score: 5, Insightful
    Sorry, but that won't do. It's fine for governments to buy products where they can switch vendors fairly easily. It's also fine for governments to use software that's open source.

    But when governments start using Windows, they are tied to the business decisions and future of a single company: they can't buy any substitutes and the license doesn't permit them to hire others to modify the code and redistribute the modifications. Even if Microsoft published the complete source code on the Internet, customers would still be completely at the mercy of Microsoft's business decisions because of the license. Incidentally, it's not just Microsoft: Sun is trying to navigate itself into the same position with Java, because, ultimately, all usable Java2 implementations have large chunks of code licensed from them.

    Unless there are exceptional circumstances, the only systems governments should rely on are systems with open, non-proprietary standards. They don't have to be open source if there are multiple, reasonably interchangeable implementations. If they are open source, even better. Becoming dependent on a single vendor for anything is bad enough for a business, but for a government, it is really dangerous.

  15. Interesting concept. Pity it's pointless. by hayden · · Score: 4, Insightful
    They show governments the source to their cryptographic functions. Suits go "It must be secure then." People beaten with the clue bat reply "Well, in a word. No."

    Unless they show them everything then it's completely pointless. Sure the data is properly encrypted by the function but the data and the key has to get to the function first.

    And even with the code they can't be sure that it still isn't backdoored. It's the same as the login/compiler trojan that was in unix for years (somebody karma whore for a link, I can't be bothered).

    --
    Nerd: Derogatory term typically directed at anybody with a lower Slashdot ID than you.
  16. Snazzy by houseofmore · · Score: 5, Funny

    "Countries will also be able to incorporate their own encryption schemes 'based on Microsoft's software'."

    I'm sure governments around the world will breath a sigh of relief once their networks have been secured by MS Wallet(tm).

  17. Reminds me of a joke by stox · · Score: 5, Funny

    We used to have at Bell Labs in the late 1980's. If we ever wanted to put one of our competitors out of business, we would send them a copy of the 5ESS source code. They would go bankrupt trying to analyze it.

    --
    "To those who are overly cautious, everything is impossible. "
  18. RE: Your .sig by Zordak · · Score: 5, Funny
    OT, but your .sig made me think of something that occurred to me recently. It was stupid of Darth Sidious to clone an obviously incompetent adult to make Storm Troopers and them arm them with blasters they were ill-equipped to handle. As the parent of a 2 year old, I posit that a massive army of toddlers armed with Peanut Butter and Jelly Sandwiches, Pancake Syrup and Magic Markers would be a force that would rival Nature herself in pure destructive power. It would have taken this terrible, unholy army approximately ten minutes to dismantle the entire fleet of ships that Storm Troopers were trying to blast apart in AoTC. Most of the ships, operating under crippled, gummed-up guidance systems that have been reprogrammed to point to the nearest black hole, with controls that stick in all the wrong places, and terminals impossible to read for all of the random black markings, would simply crash into each other, with the captains of said ships welcoming the sweet deliverance of death. The rest would get hopelessly lost in the depths of space, and by the time anyone found them, the crews would be incurably mad.

    In case you are wondering, yes, having a two year old is occasionally associated with sleep deprivation. We now return you to your regularly scheduled Microsoft bashing.

    --

    Today's Sesame Street was brought to you by the number e.
  19. Yawn by jone · · Score: 4, Insightful

    If you aren't in a position to build, test and deploy the code you are no better off.

    So, you can look at the code? How exciting! What guarantee do you have that the binary that is later stuffed down your throat is the built from the source you looked at? None.

    False tranparency, a.k.a lipstick on a pig. :-)

  20. It may put them out of business by SgtChaireBourne · · Score: 4, Interesting
    Exposing Microsoft's code to scrutiny may just put them out of business. Coders may take a look at it and say, "we can't do anything with this junk."

    On the other hand, since those allowed access to the code probably had to sign the NDA-from-Hell, the schools, agencies, companies and individuals involved would probably be sued six ways from Sunday if they ever even though about touching competitor's code, specifically Linux. This risk, and a probably one based on past behaviour, could generate a rousing yawn similar to the original shared source announcement.

    Or it is possible that Microsoft trying to line up more victims for the Sendo treatment.

    --
    Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
  21. Re:Something to Think About by Raul654 · · Score: 5, Insightful

    Uh, because most (probably close to 95%) of Microsoft's income is from exactly 2 programs -- Windows and Office. Microsoft gets about $40 for every copy of windows that comes preinstalled. They would have to be INSANE to give up that revinue stream. What can the open source community offer them that compares to that? Anyone who proposed such a thing would be fired so fast their ass would make skid marks across the M$ parking lot.

    --


    To make laws that man cannot, and will not obey, serves to bring all law into contempt.
    --E.C. Stanton
  22. Re:Something to Think About by Oestergaard · · Score: 5, Insightful

    The developers are not to blame, we just did our jobs...

    A soldier is not without guilt.

    It even seems that you agree, given that you found quitting was the only honorable thing to do. Cool :)

  23. Don't Blame Solitaire! by Puu · · Score: 4, Funny

    And it seems to degrade as you play it more without stopping.

    Why, it's not just Solitaire. The entire Windows is coded that way.

  24. But the comments cost extra by ch-chuck · · Score: 4, Insightful

    This reminds me of those 'staged' tours that opressive governments put on for the free world press every so often. I remember when Jerry Fawell went on a trip to aparthied era South Africa, took in the govt produced show, came back and said, "Well, all the natives looked happy to me".

    --
    try { do() || do_not(); } catch (JediException err) { yoda(err); }
  25. Source code is just a bunch of words by Rogerborg · · Score: 5, Informative

    Until it's compiled. Not that I'm saying that Microsoft are a bunch of lying, cheating weasels. I don't have to say that, a couple of courts have done it for me.

    Given that, and given the "other arrangement" that the US gubmint has to access the source (note "the" source, not "some" source), I would have no confidence that anything shown to me by Microsoft - in a Microsoft lab, controlled by them, not available for tinkering or compiling - actually represented the source used to build the version of Windows that I was deploying across my home nation of Elbonia.

    --
    If you were blocking sigs, you wouldn't have to read this.
  26. Re:Something to Think About by technix4beos · · Score: 5, Informative
    Here is the relevant link as reported by CNet:
    http://news.com.com/2100-1001-966219.html?tag=rn

    Here is Microsoft's SEC Filing:
    http://www.sec.gov/Archives/edgar/data/789019/0001 03221002001614/d10q.htm

    Quite easy to find:
    http://slashdot.org/article.pl?sid=02/11/17/203722 3&mode=nested&tid=109

    By the way, someone posted about Microsoft opening source code to India.. Slashdot had an earlier story here:
    http://slashdot.org/article.pl?sid=02/12/12/204625 5&mode=nested&tid=109

    Another slashdot article on the XBox losing money:
    http://slashdot.org/article.pl?sid=02/11/15/151923 4&mode=nested&tid=109

    Amazing what turns up when you do just a little bit of research. ;)

    --
    user@host$ diff /dev/urandom /dev/uspto