Slashdot Mirror
FBI on the Windows Source Code Theft
Chris Gondek writes "There are various articles about the Stolen Windows Source Code, but today it is confirmed that an FBI task force hunted for a cyber-criminal who posted on the internet source code for Windows which says 'I can confirm that the Northwest Cybercrime Task Force was investigating, FBI spokeswoman Robbie Burroughs said. The posted program is part of the source codes, or blueprints, for Windows 2000 and Windows NT 4.0, according to the company.' "
In any case, Microsoft's code allows the company to keep its near-monopoly on computer operating systems, for the same reason Coca-Cola guards its secret formula.
Yes, It's very lucky that there is absolutely no way to obtain any MS source code!
Unpretentious Sydney reviews by unqualified Sydney reviewers
The article says FBI spokesperson said 'It's illegal to download it.'. How can that be? Is it really so? What if your girlfriend downloads a file called 'cookingrecipes.zip' and it happens to contain stuff she did not know - such as Windows source code? Does that mean innocent downloaders can be put in jail?
Aha. Microsoft gets one of its sock puppets to expose some obsolete source files of an old version of Windows, and has them do it on a Linux box in order to make it look like Linux is as shaky in the security department as Windows. My God those people are Machavellian. I'll bet some of the same people behind the fake Mars landers are behind this.
I haven't had many problems with it.
Maybe you are over reacting.
Not that I condone this
Nothing in the world is more dangerous than sincere ignorance and conscientious stupidity.
Technically, you could call source code blueprints. The compiler follows the instructions you've requested, then translates it into assembly and then object code. Some compilers will do a good job (Intel's) and others will needlessly bloat the specifications (GCC). Just like building a house.
It's a perfect metaphor. Computers don't run C code, just as we don't live in drawings of houses. Both are human-readable representations that we can use to build the implementation.
What good was gained from doing this? What benifit is there?
This whole affair is going to have one effect similar to that of major virus upgrades: it will scare the recalcitrant to upgrade.
Deliberately falling short of carrying that analysis any further...
Get thee glass eyes, and, like a scurvy politician, seem to see things thou dost not.--King Lear
I agree that it was wrong to release the source code without permission, but I disagree with you sueing the one who distributed it. If you have a problem with your computer's security and feel the need to sue someone, sue Microsoft. You'd lose though, you've already signed an agreement excusing them from practically everything. I have a feeling if the source code to my linux distribution was ilegally released (its not finished, and MY software isn't free until I say so) that the FBI wouldn't give a shit.
http://illhostit.com/ - Webhosting
If you want to be secure, you shouldn't be using software whose security depends solely on the secrecy of the source. it's know as "security through obscurity" and almost everyone agrees it doesn't work.
Even microsoft won't be so stupid as to rely on it.
the main functions of law enforcment are revenge and the instillment of fear rather than prevention. they seem to be performing thier function quite well.
"It's so convenient to have a system where everyone is a criminal" - A. Hitler
Duh. Corporate America and the US Government are business partners.
The more money you have, the more of an American you really are in the eyes of the government.
On the flip side, I've already given up on Microsoft, and want nothing further to do with them or their products, so somebody leaking their code is almost a bad joke to me at this point. The most likely conspiracy to come out of this is that the next version of the Linux kernal will have a cloud of accusations that it derived some of its functionality from Windows 2000 source. (Oh please...)
I guess the ugly part is dealing with the feds out there who are intent on taking names and kicking ass... After all, it's a national emergency! Microsoft's code has been leaked!
Feh.
Many of us have woke up to the fact that you don't need Windows to accomplish your goals on a computer. While the rest of of us are trying to actually get something done with our computers (instead of updating them every 15 minutes), Microsoft is suddenly crying out "Thieves!". Just how does MS come up with these horribly written plot devices?
Interesting. From this, one must conclude that either (a) Microsoft legitimately releases the code to others outside these two programs, but we don't know about it; (b) Microsoft has absolutely no idea how the source was released but is lying through its teeth claiming there was no security breach nor an unauthorized release from its shared source programs; (c) Microsoft leaked the code itself for nefarious purposes (e.g. destroying ReactOS).
We report, you decide.
You're quite right - but there is a difference...
Let's use the home metaphor - you live in a house in a neighbourhood built by "MS Homes". They are nice, comfortable homes, but the security system involves closing your front door with a plastic latch. Because the latch doesn't LOOK like plastic, everyone feels secure. Burglars, however, suspect there is an easy way in to the homes.
Now, if none of the good guys examine the security and say, "Hey, maybe these latches should be steel", then eventually a bad guy will figure it out and your home is open for business.
In such an event, if a good guy opened *a* front door on a *single* MS home, then posted a note in the local newpaper that maybe latches should be upgraded, I'd sleep with a shotgun until my latch was replaced. In the end, I'd have a safer home and know it. Without the good guy, I don't have a safe home, AND I'm unaware until a break in.
The same 'tools' can be used for legit purposes, like if you are the security admin of a company..
Its your JOB to make sure that you arent vunerable..
But, you have to convince the jury of that....
---- Booth was a patriot ----
True, but it was not developed as closed source and then made public over one night. Because that would not have been very smart, right...
All you need is a jury, and explain you were doing something LEGAL, that turned out to be illegal due to the actions out of your control.
..
( this is assuming her recipes were not restricted from re-distribution of course ).
It would be the same case if you went to a legit store ( like a pawn shop or antique store )..
and bought an item in good faith that anyone would assume was legally theirs to sell...that later turned out to be stolen
Sure, they take away the object, but you dont get arrested...
This isnt a matter of 'ignorance' of the law, its a matter of intent beyond your control.
That said, if you *kept* said mis-labeld file, then of course its minor to prove intent...
---- Booth was a patriot ----
Shouldn't we adjust that "financial loss" number by subtracting out the $$$ made by selling people like me computers with Windows on them? Often without a choice? Only to have me reformat the drive and install Linux? Someone else gets Windows without paying, that should be balanced by me paying for Windows and not using it. It's like them rooting through my trash cans before the truck picks them up .
Open Source code is available for everyone. Only criminals can use the Windows code.
Programming can be fun again. Film at 11.
There's nothing wrong with goto. You're just too influenced by Dijkstra's flamebait. Use it sometime... it's quite refreshing.
The more problems MS installations have, the higher the pressure for migrating away. The more systems migrated away, the higher heterogenity of the Net ecosystem, the higher overall resistance to platform-specific threats - and the higher pressure for compatible, standardized data-exchange formats; proprietary ones could then become a disadvantage instead of a lock-in advantage.
The computer world needs to be pushed into different dynamic-equilibrium mode. The sooner, the better.
The Piracy of Windows hurts Linux more than Microsoft because most of the piracy occurs in areas where the majority of the people can't afford the high cost of a Windows OS. If it were impossible to pirate a copy of MS Windows, then most of these people would be using more affordable Linux distros, rather than buying Windows and Windows software.
Quemadmodum gladius neminem occidit, occidentis telum est
As has been pointed out, you are not anonymous when you use bitTorrent. If you're stupid enough to download from the links in the parent, there's a very good chance that someone at microsoft or even the FBI will be logging your IP address. Don't be stupid - ignore the parent.
Nope. A blueprint is a plan. A house is an implementation of the plan. Likewise source code is an _implementation_ of a plan - not a plan.
:: blueprint:house :: blueprint:house :: blueprint:house
:: blueprint:house :: blueprint:house :: blueprint:house /* a bit tenuous */
:: blueprint:house :: blueprint:house :: blueprint:house :: blueprint:house
These things are relative:
1) flow chart:source code
2) source code:machine code
3) machine code:execution
4) building requirements spec:blueprint
5) blueprint:house
6) house:daily life
What I find neat is that the relation is transitive, i.e.
1+2) flow chart:machine code
1+2+3) flow chart:execution
2+3) source code:execution
4+5) building requirements spec:house
Why did they take the risk? Because it's not a risk. It turns out they've learned the lessons from opensource, and now they embrace it, though in a familiar embrace, extend and smother way.
I said it before and I'll say it again: the globalization MUST be improved. If they want investigations across the borders - they have to remove the borders. That include the freedom to trade across the borders, the freedom to hire across the borders, the freedom to ELECT across the borders, the freedom to immigrate across the borders.
You don't wanna give that freedom to people? Enjoy your useless attempts to sue DVD hackers in Norvey and find IP addresses in Russia.
Remember: there is no such thing as "half of globalization". It either exists givig equal opportunities and freedoms to everyone, or it doesn't exist at all.
Less is more !
It doesn't matter how much work it is. If they trace the source of the leak to someone using this type of service, they will expend a vast amount of energy and money to find it. It doesn't matter how many tunnels, BNCs, VPNs, proxies or PGP encrypted sessions they need to get through, the FBI with the backing of Microsoft *will* find the perp. They have 52.78 billion in cash.
Just a reminder to anybody out there that is doing any kind of development for anything, don't even look at the code because if you do and you are caught, any of your work from this point on can be considered property of Microsoft. If you don't think this would happen look at IBM and SCO. And I doubt any of you have enough money to take on Microsoft, even the DOJ failed, so what chance do you have.
Granted, we have so much riding on Windows that it being compromised is akin to loosing a national secret, but who is to blame here? If we lean so much on MS's code being secure, why are people storing data on there that could be a probem if the system was hacked?
--pete
why it takes less than six days for M$ to be hot-n-heavy on the trail of the source of the leak while it takes M$ six months to patch a serious security vulnerability in their source code?
Eternity: will that be smoking, or non-smoking? I Corinthians 6:9-10