Slashdot Mirror


BBC Bill Gates Interview Part 2: Security

securitas writes "In the second of two parts, the BBC's Stephen Cole of the technology show Click Online interviews Bill Gates about Windows, viruses, security, spam, 'trustworthy computing', Longhorn and being anti-competitive. Sample quote: 'Certainly you can never underestimate the level of malicious people out there who are going to try to take advantage of whatever things there are. That's why we made trustworthy computing the top priority.' Streaming media in Real format is also available. [Video: Broadband | Narrowband] You can read the first half about the 'digital lifestyle' in Part 1: Bill Gates plots a Windows future. Here is the Slashdot discussion of the first part of the interview."

216 of 289 comments (clear)

  1. It takes one to know one! by smccto · · Score: 5, Funny

    "Certainly you can never underestimate the level of malicious people out there"

    And he can?

    It takes one to know one!

    1. Re:It takes one to know one! by zcat_NZ · · Score: 2, Insightful

      "Certainly you can never underestimate the level of malicious people out there"

      And he can?

      Of course he can; Microsoft has been GROSSLY UNDERESTIMATING the motivation, depth of knowledge, speed to exploit, and I guess overall 'level' of malicious people for years.

      Perhaps that's not what he meant..

      --
      455fe10422ca29c4933f95052b792ab2
    2. Re:It takes one to know one! by TheSpoom · · Score: 3, Insightful

      Indeed.

      Trustworthy Computing isn't a way to secure your computer. It's a way to take its control away from you.

      --
      It's better to vote for what you want and not get it than to vote for what you don't want and get it.
      - E. Debs
  2. Security? Ha! by mboverload · · Score: 4, Funny

    Bill Gates talking about secuity is like the corner whore talking about the evils of premarital sex.

    1. Re:Security? Ha! by Scoria · · Score: 4, Funny

      Bill Gates talking about secuity is like the corner whore talking about the evils of premarital sex.

      I suppose that Linux users really are virgins, then. :-)

      --
      Do you like German cars?
    2. Re:Security? Ha! by Anonymous Coward · · Score: 1, Funny
      Bill Gates talking about secuity is like the corner whore talking about the evils of premarital sex.

      Maybe he found Jesus. It happens. As for Bill Gates finding premarital booty, well, I just can't envision that.

    3. Re:Security? Ha! by mboverload · · Score: 1

      He got some before he married. Hell, anyone who says they "waited" are blatent liars.

    4. Re:Security? Ha! by jellomizer · · Score: 2, Insightful

      I suppose that Linux users really are virgins, then.

      No although Linux Security is better and more manageable then windows security. It is not like a Linux system was hacked. I know my system was back when I first started using Linux on a college T1 line, back in the mid 90s. They used a buffer overflow threw the print server to gain access to my system. Shortly after that I got wize and closed all unneeded services. (The stupid college MIS Department forbid people installing firewalls at the time). But still the default linux at the time had a lot of ports open much more then windows did at the time. But now with more user-friendly personal firewalls and most of the ports blocked by default it is better but still never put your faith in your os or your own administration abilities, always get other opinions on how your security is setup, because what you may think is tight may still have a gaping hole.

      --
      If something is so important that you feel the need to post it on the internet... It probably isn't that important.
    5. Re:Security? Ha! by srjames · · Score: 4, Insightful

      Unless I missed something he didn't once say that Windows was currently secure, or that it has been in the past.

      What he did say was "we can always do better" and "There is a lot more to do."

      He also went on to say that Longhorn should be more secure.

      Since none of you actually think about anybody but yourselfs in terms of what people want, let me explain it to you.

      Most people (see: Users, Windows), don't want to give up usability for security. I currently use Linux, and have for years. I'm pissed off about the recent local root exploits and thought about switching to a BSD (namely OpenBSD), for security. But, after talking to a good friend of mine decided that I didn't want to compromise some of the usability of Linux for the security of *BSD.

      Sure Windows sucks for a lot of reasons, but there's obviously more reasons that people are still using it.

      It's the same reason that people drive cars with automatic tranmissions. A manual transmission has a number of benefits, but people just don't want the hassle.

      Windows is prone to a lot of problems due to the default "administrator" account. But do you really think people want to log in to it to install software? Do you think they actually understand the difference? I doubt it.

    6. Re:Security? Ha! by R.Caley · · Score: 5, Insightful
      Windows is prone to a lot of problems due to the default "administrator" account.

      Once you've seen a child having to become adminstrator to play a Microsoft game, you quickly realise just how serious Microsoft are about security and usability.

      --
      _O_
      .|<
      The named which can be named is not the true named
    7. Re:Security? Ha! by ymgve · · Score: 2, Insightful

      (Was written before I realized the comment talked about a Microsoft game. My point still stands - it's the Game Publisher Microsoft that's at fault, not the Operating System Developer Microsoft.)

      In Microsoft's defence, this isn't their fault. It is perfectly possible to run games under a restricted user account, if you give up one feature.

      Copy protection.

      The reason nearly every game needs administrator access is that the game publishers' "nifty" protection tricks need to hook into the more advanced features of the CD-ROM drivers.

      But of course, no major publisher will ever consider removing that "feature" to give users more flexibility.

    8. Re:Security? Ha! by R.Caley · · Score: 1
      My point still stands - it's the Game Publisher Microsoft that's at fault, not the Operating System Developer Microsoft.

      But the game publisher and the OS developer are part of the Microsoft whose head is being interviewed and is talking about a commitment to security.

      The reason nearly every game needs administrator access is that the game publishers' "nifty" protection tricks need to hook into the more advanced features of the CD-ROM drivers.

      Actually, in the case I was rememberring (Dangerous Creatures?) I believe the game ran perfectly except when you wanted to load or save. It was just a case of them not botherring to get the permissions right. No deep technical problem, just `we don't give a shit because everyone should run as administrator anyway'.

      --
      _O_
      .|<
      The named which can be named is not the true named
    9. Re:Security? Ha! by CaptainZapp · · Score: 1
      Although you are certainly right that even nowadays standard Linux distributions are far to open to attacks I still think there's a huge difference in the security approach of Linux and Windows.

      While Unix type systems where designed for multiuser access from the start, Dos and Windows where designed for single user systems.

      True that Unix was not designed with security in mind (you would have to jumpe on the RSX/VMS bandwaggon if you wanted something "really" secure at that time) it is far easier to maintain security, since only root can do real damage on a system level. Sure, there are umpteen setuid scripts and programs that can potentially be exploited. Nevertheless it's safer by design.

      Add to Microsofts single user workstation design the unbelievably brain dead idea of executing scripts when you only look at your mail in preview mode and directly executable scripts/execs as email attachements. This is not only in hindsight unbelievable idiotic; it is in fact such a dumb design decision that the responsible people should be tarred and feathered for that.

      Those design flaws are so gross, that it's almost impossible to patch such a system.

      Sure, Microsoft reacted with a service pack, which seems to do quite ok so far. But that was only when their irresponsible - not to say criminal - attitude threatened to explode into a PR desaster.

      --
      ich bin der musikant

      mit taschenrechner in der hand

      kraftwerk

    10. Re:Security? Ha! by Insightfill · · Score: 3, Informative
      Actually, as an ISV, if you want to put the shiny "Designed for Windows XP" sticker on your application, you have to pass a few Microsoft-administered tests.

      Some criteria:

      1) When app installs, all file and registry changes are contained in app directories and reg keys, unless such changes constitute system upgrades (MDAC, etc.) Start menu, etc. excluded.

      2) App is fully usable under "user" level account (no write-backs to protected dirs, or HKLM registry).

      3) App is fully usable under "fast user switching"

      4) App cleanly fully uninstalls.

      Actually, the full list is much longer, but the point is that MS gives brownie points to the dev. firms that can make apps run under "user" permissions. My guess is the game firms don't care about that level of certification, but for corporate-level apps, it makes all the difference. If you pass all of those tests, you can generally be assured of running under Citrix, Terminal Server, REALLY "locked down" desktops, etc.

    11. Re:Security? Ha! by PastaLover · · Score: 1

      "Most people (see: Users, Windows), don't want to give up usability for security."

      It is a tradeoff. If you are not willing to give up usability for security, you don't deserve security. And yes I have worked in places where they used windows and yes I have seen how they feel about security (installing security updates may break things, so we don't do that). Seriously, the problem is sometimes not with the developers, not even Microsoft but with the idiot users who can't be bothered to secure their own systems. When you leave the house at night or go to sleep you do lock your door don't you? You don't just leave it open because "it's too hard to lock them all".

    12. Re:Security? Ha! by CFTM · · Score: 1

      Seriously /.er's ... get off this Windows sucks security binge. If Windows XP is set up correctly, it is a fairly safe operating system. So often people forget that if Linux held a 90% market share there would be a great deal many more exploits for the Linux OS. No one spends the time looking for the mistakes, at least not like they do for Windows, there's no money in it.

      I'm not saying Microsoft is perfect about it but I am saying I'm happy with Windows XP SP2. It gets the job done. It's not perfect and I will be switching to a Mac in the next six to eighteen months but XP w/ SP2 is tolerable.

    13. Re:Security? Ha! by Anonymous Coward · · Score: 1, Insightful

      No one spends the time looking for the mistakes

      People do spend time looking for mistakes in Linux; a vast amount of which view software as a scientific effort as opposed to cash cow. If you look at this fundamental difference, you see the the former strives for the best possible solution to a problem. The latter merely wants to sell the product that buyer views as being tolerable or a fairly safe operating system.

      Here's an idea, find your great deal many more exploits for the Linux OS. And I'll even give you the source code!!!

    14. Re:Security? Ha! by garagekubrick · · Score: 1

      Most people (see: Users, Windows), don't want to give up usability for security. Which is why, unless they are a hardcore PC gamer or a Windows developer, they should use OSX on a Mac.

      --
      ** http://www.nkhumanrights.or.kr/ ** Human rights in North Korea. 1 million estimated dead from starvation.
    15. Re:Security? Ha! by Foolhardy · · Score: 1
      While Unix type systems where designed for multiuser access from the start, Dos and Windows where designed for single user systems.
      DOS, DOS/Windows 3.1 and Windows 9x are single user with no security. Windows NT, not based on 9x or DOS, was multiuser and had security from the very first version, by design. All kernel objects, from files to events to threads have an ACL that controls access. Each process has a token that identifies which user it is running as. Multiple users can be using the system at the same time, each protected from interfering with each other. Remote Win32 GUI sessions require an add-on (Terminal Services or MetaFrame), but users can use other protocols, such as SSH, to connect without limitation.
      ...it is far easier to maintain security, since only root can do real damage on a system level.
      Although NT has no exact equivalent to root, the system's design prevents you from doing any damage to the system or other users as a normal user. You'd need a vulnerability in implementation to compromise the system, just like on a UNIX.
      Add to Microsofts single user workstation design the unbelievably brain dead idea of executing scripts when you only look at your mail in preview mode and directly executable scripts/execs as email attachements.
      I agree with you about OE. The shell that is a part of IE4, which OE is built on, is a security nightmare. You can either not use it or run it as a different user. I tend to not use it.
      Those design flaws are so gross, that it's almost impossible to patch such a system.
      There's nothing wrong with the underlying system. It's not hard to use it to sandbox insecure parts of the shell.
    16. Re:Security? Ha! by mt+v2.7 · · Score: 1

      The fact that some programs are badly coded enough that you need to run as Admin to use them isn't Windows' fault, it's shoddily coded software.

    17. Re:Security? Ha! by morleron · · Score: 1

      More like the corner whore talking about the problems of STDs.

      --
      Impeach Barack Obama for violating the Constitutional requirement to be a "natural born" citizen to hold the office of P
    18. Re:Security? Ha! by R.Caley · · Score: 1
      The fact that some programs are badly coded enough that you need to run as Admin to use them isn't Windows' fault, it's shoddily coded software.

      That will depend case by case on whether the application can be sanely created without privileges given windows security model.

      However, sine I was talking about a Microsoft application, they get bitten as not giving a damn in either case.

      I presume this all derrives from the game in question wanting to save under \Program Files\, which is what Microsoft encouraged right back to Win95 at least. It was stupid then and it's stupid now and it's a big neon sign saying Microsoft Are Clueless About Multi User Systems.

      Add in the fact that NT has this file system permission system about which there are whole courses you can take, and which is probably more than turing equivalent, and so anything imaginable could be arranged to work if they could be arsed.

      Mind you, the fact that they intentionally broke that system for the XP Home edition probably doesn't help. The worst of all possible worlds, a massively over complicated system with a massively under powered control system. Like steering the space shuttle with a bit of string.

      --
      _O_
      .|<
      The named which can be named is not the true named
    19. Re:Security? Ha! by gfim · · Score: 1

      I didn't want to compromise some of the usability of Linux for the security of *BSD

      Seriously, what would do you think you'd be compromising?

      Graham

      --
      Graham
  3. Y'know, just once... by zenmojodaddy · · Score: 1

    ... I'd like to see someone really go after Gates and hold him to account. Microsoft is guilty of anti-competitive behaviour. It's been decided in court on two continents. Why dither around asking him if he feels his company is anti-competitive? Do you really believe he's going to twirl his moustache and say 'Yes! Yes! AND I'D DO IT ALL AGAIN, MWAHAHAH!'

    Because I doubt he will.

    1. Re:Y'know, just once... by mboverload · · Score: 1
      He is the richest man on earth. He could buy single-handedly every member of congress. He could buy alot any company on earth, by himself. He could buy Walmart and fire everyone (I think, and I wish he would).

      The power he wields is unimanginable.

    2. Re:Y'know, just once... by Anonymous Coward · · Score: 1, Informative

      Walmart is the biggest retailer in the world and AFAIK has a larger market capitalisation than Microsoft. Bill Gates is the world's richest man, but his personal fortune is unlikely to be enough to buy Walmart.

    3. Re:Y'know, just once... by 0x461FAB0BD7D2 · · Score: 1

      Regardless of wealth, there are rules. Just ask Larry Ellison and his takeover of Peoplesoft. It wasn't easy, even though he's essentially in the same league as Bill Gates.

      In any case, even if he did buy every member of Congress, they could be thrown out by the population. Sometimes one vote is worth more than billions of dollars.

    4. Re:Y'know, just once... by mboverload · · Score: 1
      Every member of congress that I know of is bought by at least one large corparation. I dont see any outcry over that.

      People accept it as how it works these days.

    5. Re:Y'know, just once... by batemanm · · Score: 2, Informative
      He is the richest man on earth

      No he isn't, Ingvar Kamprad, the founder of Ikea is. Gates's fortune took a hit with the slide of the value of the US dollar.

    6. Re:Y'know, just once... by Ford+Prefect · · Score: 1

      ... And, amusingly, IKEA has been a big user of Linux for years.

      Ever peered at one of the monitors on one of IKEA's store computers? Even now, they seem to be running some weird amalgamation of X and Windows. One I saw seemed to have some Windows terminal program running in an exported window on X, and the Windows terminal program was connected to some mainframe-type system. Weird combination, but it appears to work... ;-)

      --
      Tedious Bloggy Stuff - hooray?
    7. Re:Y'know, just once... by plsavaria · · Score: 1

      Couls people just once realise Ingvar Kamprad is not the richest of the world? It's been a bad journalist analysis since the begginning. http://msnbc.msn.com/id/4664572/

      --
      The answer IS 42.
    8. Re:Y'know, just once... by That's+Unpossible! · · Score: 1

      No he isn't, Ingvar Kamprad, the founder of Ikea is. Gates's fortune took a hit with the slide of the value of the US dollar.

      You are wrong, here is proof.

      --
      Ironically, the word ironically is often used incorrectly.
    9. Re:Y'know, just once... by xouumalperxe · · Score: 1

      and he won't also answer the question straight, dodging the bullet three times.

    10. Re:Y'know, just once... by batemanm · · Score: 1
      That isn't proof it is just another article on the matter, but sounds plasible. I was a little shocked when I first heard that he was so I'll accept that it was bad journlisim (and repeating on my part).

      Mods, please mod down the grandparent, thanks.

    11. Re:Y'know, just once... by Tinidril · · Score: 1
      Regardless of wealth, there are rules. Just ask Larry Ellison and his takeover of Peoplesoft.

      I think you just proved yourself wrong. Ellison was not constrained by the rules. With the power of his wealth he was able to override them. Same is true with Gates/MS and the US anti-trust case.

      --
      XML is the best data format; unless your data needs to be read or written by a human or a computer.
    12. Re:Y'know, just once... by mormop · · Score: 2, Insightful

      I'd like to see the anti-trust lawyers going after something that'll make a real difference.

      All this pratting around over media player is wasted time when the real corner stone that holds Microsoft's monopoly up is Office. Everywhere I've tried to deploy Linux the response is favourable until people ask about Office. I'm sorry, but the claim that OpenOffice is Office compatible falls apart when you're opening a heavily formatted .doc file. Not to say that I'm detracting from Openoffice's achievement so far but unless it's flawless people don't care because they don't want to open, remake and save 5 years of Word docs.

      Why should a commercial company have to open its document formats? Simple. They are a monopoly, they have abused and are still abusing their position and despite the new cuddly image they're trying to portray they are still bullshitting in their adverts and are still using their position and wealth to control the marketplace.

      Office is the key, M$ knows it withn their "we're using an open XML format now so we must be nice" redfining the term open to mean closed. The competition knows it as they all try to offer MSOffice compliance and the fact that this is ignored by lawyers and anti-trust courts is probably the biggest indicator that someone high up is on the make.

      After the start of the DoJ case I felt quite optimistic but Bush having let MS off and the EU case looking like a bit of muscle flexing leaves me feeling fairly depressed at the whole business.

      At least living in the EU I can go Germany, France or somewhere else where they're a bit more imaginative than the UK. Come on Prime Minister, Bill will let you be photographed with him for another £100,000,000 order. Won't that help you to feel important.

      --
      Hmmmmmm..... Deep fried and look like Squirrel.
  4. Re:BBC Bill Gates Interview Part 2: Security by tomstdenis · · Score: 1

    Not quite. I saw the thingy [was up cuz of jetlag ... tom in france now ...] and it was all "advanced marketting lingo line 201"

    That longhorn "incorporates all the users desires" and that making "windows update automated was #1 priority". ... typical fodder

    --
    Someday, I'll have a real sig.
  5. Fixed by kai.chan · · Score: 4, Funny

    "Certainly you can never underestimate children out there who can easily take advantage of the big flaws in our code."

  6. Billy's "todo" list by Kadmos · · Score: 5, Interesting

    I wonder if Billy would ever tell us something isn't a "top priority"? I can just imagine it:
    "Yeah, stability, we aren't really keen on that right at the moment, actually that's way down the list."

    Thanks Bill, but with an inbox full of virus I get the feeling your "top priority" isn't as "top" as we would like.

    1. Re:Billy's "todo" list by Technician · · Score: 1

      "Yeah, stability, we aren't really keen on that right at the moment, actually that's way down the list."


      I've noticed. On old versions of Windows, you can turn on sharing and share a directory. You can set passwords for the directories. It works at home just fine to keep the kids out of my download collection.

      The wife got an XP box. I can turn on sharing and share a directory. Somehow I can't find anyplace to set a password for read or write privilages. It looks like security has taken a step down. It's a little better for multiple users on a single machine, but a lot worse for sharing on a LAN.

      Is that someting they decided to leave out of the XP home version. Is it included in the XP Pro version?

      Now I only share directories on a SAMBA share and a 98 SE box because they are the ones I can share and write protect, unlike XP home.

      --
      The truth shall set you free!
    2. Re:Billy's "todo" list by uuilly · · Score: 1

      That said, has there been a major hole exploited since SP2? I haven't heard of one. I'm not a windows user, so I don't really know.

    3. Re:Billy's "todo" list by DJCF · · Score: 1

      Tools -> Folder Options -> View -> Unlick "Enable Simple File Sharing (Reccomended)". (If its not there, you need to download a registry patch so it shows up.)

      Damn annoying, but we've all been there. I'm in the process of upgrading to a linux home server right now, actually.

    4. Re:Billy's "todo" list by Technician · · Score: 1

      Tools -> Folder Options -> View -> Unlick "Enable Simple File Sharing (Reccomended)". (If its not there, you need to download a registry patch so it shows up.)

      Thanks, I'll try it when I get home.

      Damn annoying, but we've all been there. I'm in the process of upgrading to a linux home server right now, actually.


      How MS thought enabling some LAN connected infected machine to infect all the files shared on an XP box improves security is beyond me. It just means to me I had to have another box to be the server for the games and other install files. The installation files should never be in a read/write LAN share. What were they thinking? One infected machine on the LAN can make the shared files infected. Not a smart default setting.

      --
      The truth shall set you free!
    5. Re:Billy's "todo" list by kaustik · · Score: 1

      One infected machine on the LAN can make the shared files infected.

      Close, but not exactly. I'm sure people here will corrent me if I'm wrong, but modern day "viruses" (worms, actually) don't normally infect valid files. If your computers are on the LAN with default administrator passwords, you are screwed. However, I have not seen a valid file infected with a virus in years. The malicious file may indeed copy itself over to a file share, but that is not necesarily an issue unless it finds a way to execute itself, or trick a user into executing it.
      The recent worms have seen spread across the LAN by guessing at the default admin password. If you have the XP firewall enabled on the LAN machines, this should not be an issue. Filesharing enabled may open you up to port flooding, but I doubt that one machine can "infect" your shared files...

    6. Re:Billy's "todo" list by Technician · · Score: 1

      (If its not there, you need to download a registry patch so it shows up.)


      It's not there in the Dell XP Home. Where can the registry patch be located?

      --
      The truth shall set you free!
    7. Re:Billy's "todo" list by DJCF · · Score: 1

      Hmm, sorry, it seems I was mistaken about the registry patch. It also seems MS claims the security tab is disabled in XP Home (I have Pro.), but despite this it is possible to get it working.

      First of all, your filesystem must be NTFS, not FAT. That may make the "Enable SImple Filesharing" box appear, but if it doesn't, I have heard it appears when the computer is booted in safemode. Sorry I can't be of more help!

    8. Re:Billy's "todo" list by Technician · · Score: 1

      MS claims the security tab is disabled in XP Home

      Thanks for trying. It just means that Microsoft's new offerings simply are not suitable for my applications and I will have to use something else. Thank goodness someone else was listening to what the consumer wanted. It's MS's loss and SUSE's gain.

      --
      The truth shall set you free!
  7. Dupe... by Anonymous Coward · · Score: 1, Informative

    The link to part II of the interview was posted as the first +5 Comment.

    1. Submit links from high score comments
    2. ???
    3. Instant Karma!

    Just shows that slashdot editors don't read their site at all... (and don't bother to check stories with links to their sites either)

  8. Good quote about Microsoft by millwall · · Score: 4, Funny

    I like the way he sums up the Microsoft corporation and it's company culture:

    "Certainly you can never underestimate the level of malicious people out there who are going to try to take advantage of whatever things there are."

  9. Translation of Bill's answers by OwlWhacker · · Score: 5, Insightful

    Q: "did you underestimate the value of security?"

    A: [translated from Billspeak to reality]:

    I'm not going to answer that. I mean, come on, we all know that Windows wasn't designed with security in mind. So, I tell you what, I'm going to turn your negative into a positive, like a good salesman.

    Here, for a start, I'll get you to focus on the nasty people out there that are exploiting Microsoft software - they're the bad guys, ok, not us!

    Next, I'll tell you about auto-update, and that millions of people are using it. You don't have to worry because Windows updates itself. It takes away the hassle, right? And doesn't it make you 'feel' safer?

    And of course, Microsoft has marketed the fact that security is its business. Even if Microsoft software isn't secure, we like to give that impression.

    Q: "Nevertheless, a lot of our viewers still say to us: 'Microsoft didn't take that threat seriously enough and we are having problems.'"

    A: [translated from Billspeak to reality]:

    Ok, I don't want to answer that either, as it makes us look bad - and how can I refute something that's a fact?

    Instead, I'll get you to focus (yet again) on the positive fact that Microsoft makes it easy to sit back and do nothing, letting Windows auto-update itself. Remember, Microsoft software is used because it's easy to use (not because it works).

    ...

    I couldn't be bothered to read any further.

    1. Re:Translation of Bill's answers by QuantumG · · Score: 1

      Man, it really does lose something in transcription. You've gotta hear Bill squirm to really get what he is saying.

      --
      How we know is more important than what we know.
    2. Re:Translation of Bill's answers by naily · · Score: 1
      Q: Did you ever think for a second perhaps they might be right - 'perhaps we are being anti-competitive?'

      A: (Evasive action! Evade!) Actually, the DoJ was ages before, and they wimped out at the punishment. So that doesn't really count.

      Q: Take 2, Did you ever pause for a moment and think: 'are we being anti-competitive?'. (Translation: did you break the law?)

      A: The PC industry has done an amazing job. (Translation: we ARE the industry, I AM the law!!)

      --
      We all live in a state of ambitious poverty. -- Decimus Junius Juvenalis
  10. Do we even need interviews ? by jaiyen · · Score: 3, Funny

    I thought we could get everything we needed to know just from analysing his doodles!

  11. Sorry Bill but you're full of shit by wiggys · · Score: 4, Insightful

    "Microsoft Security" is an oxymoron.

    If they cared about security (remember them saying that Windows XP was the most secure operating system ever?) they would have shipped it with the firewall on by default and most services off by default.

    Why oh why did they think it was a good idea to have an RPC server on by default when there's probably less than 1% of users who would use the feature?

    How many insecurities has Internet Explorer had since it was launched with XP? I lost count. Even now, there are still holes in there wide enough to drive a truck through but they are not patched. Microsoft want to keep things quiet until they get around to fixing the bugs, and they only fix the bugs when they see the problem being exploited in the wild.

    And, thanks to Microsoft integrating the Internet Exploder engine so tightly into their OS, if a bug affects IE then it probably also affects Outlook, Outlook Express, MS Help and gawd knows what else.

    This is security?

    Ha!

    --

    Sorry, but my karma just ran over your dogma.

    1. Re:Sorry Bill but you're full of shit by clymere · · Score: 1
      If they cared about security (remember them saying that Windows XP was the most secure operating system ever?) they would have shipped it with the firewall on by default and most services off by default.
      In case you haven't noticed, it is now.
      --
      once you go slack, you never go back
    2. Re:Sorry Bill but you're full of shit by mboverload · · Score: 1
      Yes, but most people will just turn it off because it keeps "annoying" them with those "damn popups that ask if I want to let a program get on da net"

      Never underestimate the stupidity of humans in general. It is the safest bet ever devised.

    3. Re:Sorry Bill but you're full of shit by danheskett · · Score: 1

      That's just simple untrue. Amazingly untrue. Most people leave it on. It is very rare that you get a pop-up - only when you have a *new* app that is trying to access the net. It's not like you get it everytime some little app wants to download an update.

      The Windows firewall and XP SP2 in general have very, very good penetration of the market. MS has done a very good job of getting SP2 into the hands of customers.

    4. Re:Sorry Bill but you're full of shit by mboverload · · Score: 1

      It is not enough. Anything less than Sygate or Zonealarm is like doing a taiwanese whore without a condom.

    5. Re:Sorry Bill but you're full of shit by QuantumG · · Score: 4, Interesting
      Switch it off (it is possible, but not straightforward) and see what breaks; it's an essential component, right or wrong.

      That's not an argument at all. You wanna know what's fucked. Try debugging an application that is in no way network related on a machine that has Microsoft's firewall software enabled. It doesn't work. Why? Cause to initiate a debugging session visual studio actually sends packets out to the network adapter and back onto the machine. If you're blocking the remote debugging (say, because you don't want people brute forcing the trivial security that stops them from debugging processes on your machine) you can't even do local debugging. That's fucked behaviour and demonstrates that Microsoft really doesn't give a shit about security at all.

      --
      How we know is more important than what we know.
    6. Re:Sorry Bill but you're full of shit by Jonti · · Score: 3, Informative
      GP: ... if a bug affects IE then it probably also affects Outlook, Outlook Express, MS Help and gawd knows what else.

      P: The alternative, of course, is to have seperate HTML rendering components for every application that wishes to render HTML.

      Dunno why this scored three -- the grandparent is right, and the parent is wrong. So the (only?!) alternative is to have separate html rendering components for every application that wished to render html, is it? Why so? I think we should be told!

      All that's needed is for the html rendering to run is userspace, rather than kernel space. That is actually what khtml does, which yes, is integrated tightly with the KDE graphical shell, but not with the kernel.

      Fixing a bug in IE can mean fixing a bug in kernel code -- and that bug in the kernel code might affect dozens of other applications. You don't have to build things that way. That was the grandparent's point.

    7. Re:Sorry Bill but you're full of shit by QuantumG · · Score: 1

      your definition of kernel code must be different to mine.

      --
      How we know is more important than what we know.
    8. Re:Sorry Bill but you're full of shit by MadKeithV · · Score: 2, Informative

      GP >>> How many insecurities has Internet Explorer had since it was launched with XP? I lost count.

      P >> So, you don't actually know, then? How can you criticise them meaningfully if you don't know? Saying "I can't remember, but I'm sure it's had lots!" is just spreading FUD.

      No, now you are spreading FUD. Not knowing the exact number is different from not knowing at all. I don't know how many grains of sand there are on yonder beach, but I am VERY sure there are lots. Similarly, I haven't counted the exploits, but I do know I have seen quite a few. "Losing count" is certainly not the same as "not having the foggiest clue".

    9. Re:Sorry Bill but you're full of shit by drsmithy · · Score: 1
      All that's needed is for the html rendering to run is userspace, rather than kernel space.

      IE *does* run in user space. There are no "kernel hooks" for IE.

    10. Re:Sorry Bill but you're full of shit by BaldGhoti · · Score: 1

      The Windows firewall and XP SP2 in general have very, very good penetration of the market. MS has done a very good job of getting SP2 into the hands of customers.

      Microsoft has done a good job of getting SP2 into the hands of WINDOWS XP customers. People running 2000 or (god forbid) ME or 98 are up feces creek without a paddling implement.

      When it's a question of a more secure system vs. saving $150, what do you think most Joe Users are going to do?

      --
      [insert witty sig here]
    11. Re:Sorry Bill but you're full of shit by wiggys · · Score: 1
      >>How many insecurities has Internet Explorer had since it was launched with XP? I lost count.
      >So, you don't actually know, then?

      Not the exact number, no. Do you?

      I know there are dozens, too many to remember, and a large proportion of them are considered by Microsoft as "serious".

      In fact, that's the main reason why so many people are infected with spyware as some sites do drive-by downloads.

      Maybe you were just trolling.

      --

      Sorry, but my karma just ran over your dogma.

    12. Re:Sorry Bill but you're full of shit by strider44 · · Score: 3, Insightful

      Incidentally, the same is true of KHTML, which (last time I looked) was integrated pretty tightly into KDE. True, you have a choice to not use KDE, but then I seem to be managing pretty well using XP and not using IE, OE, etc.

      Umm no it can't. IE is integrated into the kernel. iexplore.exe is just a shell that calls the kernel to render pages. Konquerer is just another application, and you can easily uninstall konquerer as well as the libraries and use other applications as suppliments, as long as you remove the MIMEs.

      However there is nothing to stop an application from calling the konquerer or gecko libraries, or requiring their installation. It's simple enough with shared libraries to do.

    13. Re:Sorry Bill but you're full of shit by wiggys · · Score: 1
      Read my post very carefully. I was talking about when XP was first shipped.

      We are now on Service Pack 2 and only now is there a half-way decent firewall on by default. How long did that take, three and a half years or so?

      --

      Sorry, but my karma just ran over your dogma.

    14. Re:Sorry Bill but you're full of shit by skiman1979 · · Score: 1

      I know plenty of users out there who just allow everything whenever a pop-up comes up asking them to block/allow. I was talking to someone before and they said that when their Norton Internet Security pops up asking them to block or allow something, they pretty much always allow it because "it suggests we do that."

      "hmmm... freebuddyicons.exe is trying to access the internet. I love these icons, they're so funny. Of course I should allow this."

      --
      Having a smoking section in a public restaurant is like having a peeing section in a public swimming pool.
    15. Re:Sorry Bill but you're full of shit by skiman1979 · · Score: 1

      Doesn't IE run as LOCAL SYSTEM or something? That's certainly not the same thing as it running as .

      --
      Having a smoking section in a public restaurant is like having a peeing section in a public swimming pool.
    16. Re:Sorry Bill but you're full of shit by vadim_t · · Score: 1

      Yeah, Konqueror is conceptually very similar to IE. And just like the MSHTML engine, KHTML is a component that can be embedded in applications.

      However, KDE is completely open, and there's nothing that stops you from replacing KHTML with something else. In fact, there's a Gecko KPart that lets you have the Mozilla engine inside Konqueror. Haven't seen that in IE yet.

    17. Re:Sorry Bill but you're full of shit by EddWo · · Score: 1

      You don't seriously believe that the HTML renderer is in kernel mode do you?

      You should read some books on Windows architecture sometime.
      Lets just say its more like
      mshtml.dll -> gdi32.dll -> ntdll.dll ->/kernel mode/->win32k.sys -> ntoskrnl.exe

      --
      "Taligent is still pure vapor. Maybe they'll be the last who jumps up on Openstep... "
    18. Re:Sorry Bill but you're full of shit by SgtChaireBourne · · Score: 1
      How many insecurities has Internet Explorer had since it was launched with XP? I lost count.

      So, you don't actually know, then? How can you criticise them meaningfully if you don't know?

      Well then look it up.

      According to Secunia, MSIE 5.5 has had 55 so far with 10 remaining unpatched.
      MSIE 6 has had 76 so far with 20 remaining unpatched, 98% are remote exploits.

      SP2 was supposed to fix many things, but it was as as difficult as a major OS upgrade, just ended up breaking many things, not fixing much and not really fixing what it claimed to fix. Granted, it's slightly more than purely a PR move, but not by much. However, it burned up valuable staff time that could have otherwise been used to evaluate competing products. The delay doesn't help MS' claim of prioritizing security much either.

      It's common knowledge that MS products just aren't designed with security in mind, but if you want details, then look it up.

      --
      Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
    19. Re:Sorry Bill but you're full of shit by KZigurs · · Score: 1

      "emember them saying that Windows XP was the most secure operating system ever?"

      Ever heard about relativity? Cmoon - it's still way more secure than Windows _ME_. And in Bills world there isn't MacosX or freeBSD (linux intentionally not mentioned)

    20. Re:Sorry Bill but you're full of shit by FuzzyBad-Mofo · · Score: 1

      ..in Bills world there isn't MacosX or freeBSD..

      Indeed, we need look no further than the Microsoft definition of "cross platform", which means no more than: "compatible with multiple versions of Windows."

    21. Re:Sorry Bill but you're full of shit by Sexy+Commando · · Score: 1

      I think you computer's infected because iexplorer.exe does run as

    22. Re:Sorry Bill but you're full of shit by Blakey+Rat · · Score: 1

      The firewall was on by default even in the first release of Windows XP *if* you told XP during setup you were a DSL/Cable customer. If you told XP you were connecting through a LAN, it didn't turn on the firewall (assuming that the LAN administrator already had a good one running, apparently.)

    23. Re:Sorry Bill but you're full of shit by danheskett · · Score: 1

      Yeah, well, the problem being that XP has a huge market share of Windows users. Windows 2000 is not an OS for average users, we can agree on that, right?

      http://www.w3schools.com/browsers/browsers_stats.a sp

      Windows XP + Win2k = 82% of all PCs browsing the web in this sample. That's not uncommon!

      There are a very small number of "average joes" still running 95, 98 or ME. If you are an average joe who has purchased a new computer in the last 4 years, you're running XP with a very high degree of certainity.

    24. Re:Sorry Bill but you're full of shit by danheskett · · Score: 1

      The default, however, is to just allow it once. Which means the user will continue to get that box once a day, or once a session, until they read the box, and decide to block it, investigate it more, or allow it always.

      The XP SP2 shows that MS actually cares somewhat about security and usability.

    25. Re:Sorry Bill but you're full of shit by danheskett · · Score: 1

      Actually, no.

      If you routinely visit the type of site that is bound to get you an attempt at infection, download sketch "shareware" apps, and generally are clueless, yes, I would recommend a much better firewall which really really is dedicated to stopping everything.

      If you are "joe user", than the XP SP2 firewall is more than sufficent.

    26. Re:Sorry Bill but you're full of shit by Tim+C · · Score: 2, Informative

      IE is integrated into the kernel

      Sorry, you're going to have to supply some proof of that.

      iexplore.exe is just a shell that calls the kernel to render pages.

      Almost right - iexplore.exe is just a shell that calls mshtml.dll to render pages.

    27. Re:Sorry Bill but you're full of shit by Tim+C · · Score: 1

      Doesn't IE run as LOCAL SYSTEM or something?

      No it does not, at least not on XP (the only Windows version I can check at the moment).

    28. Re:Sorry Bill but you're full of shit by Tim+C · · Score: 1

      All that's needed is for the html rendering to run is userspace, rather than kernel space.

      What makes you think that mshtml.dll runs in kernel space?

      *My* point was that Outlook, OE, Help, etc all use mshtml.dll to render HTML because it's a standard system component. The alternative to using a standard system component for a given piece of functionality is to code it yourself. If every supplier who required HTML support did so, then you would end up with the situation I described.

      That is why a bug in IE probably affects the listed apps - because they all use mshtml.dll to render HTML, not because the IE bug affects the kernel.

    29. Re:Sorry Bill but you're full of shit by drsmithy · · Score: 1
      No. It runs in whatever user context starts it (so, obviously, if you manage to fire up a copy as LOCALSYSTEM, that's what it will run as).

      Architecturally, IE is practically identical to khtml. Some would probably say that's where KDE/khtml got its inspiration from.

    30. Re:Sorry Bill but you're full of shit by Foolhardy · · Score: 2, Insightful
      Apparently the message isn't getting through. Here's a repost of a comment I made before:
      with the IE api hooks into the kernel
      What are you talking about? Internet explorer is a 100% user mode shell environment. It is not, has never been, and never will be integrated into the kernel, or given special hooks or privileges. All of the entry points into the kernel are exported by ntdll.dll. Tell me which of those functions hooks IE into the kernel.
      The objects you would need to control to take over the system are kernel objects which IE plays no part in managing.
      Since the Win32 server moved into kernel mode (in NT4), it has its own system function table, and none of those functions are a part of IE either.

      Show me ONE malware program that can install itself for all users when only a normal user runs it.
    31. Re:Sorry Bill but you're full of shit by skiman1979 · · Score: 1

      I stand corrected. It doesn't much matter anyway. Most average users run as local administrator anyway by default.

      --
      Having a smoking section in a public restaurant is like having a peeing section in a public swimming pool.
    32. Re:Sorry Bill but you're full of shit by kbrannen · · Score: 1
      Yeah, well, the problem being that XP has a huge market share of Windows users. Windows 2000 is not an OS for average users, we can agree on that, right?

      No, we can't. It all depends on how you look at the masses. Ask any pollster, not all polls are equal.

      http://www.w3schools.com/browsers/browsers_stats.a sp
      Windows XP + Win2k = 82% of all PCs browsing the web in this sample. That's not uncommon!

      Nope sorry, bad example. Who goes to w3schools? High tech people like you and me, but people like my parents, all my non-tech friends and family? I don't think so. What do they use? Whatever was on the computer when they bought it 5 years ago. Surprise! That's mostly '98. Heck, I just recently upgraded my children's computer from '98 to 2k. Why? For admin purposes not because '98 stopped working.

      And personally, I have no plans to ever advance past 2k -- at least at home where I can control everything (work is different and is forced on me). I don't like phone home software, especially OS's. Most of my "home" work is done on Linux anyway with 2k for those last few apps and games I don't want to give up just yet. But I could give those up and be totally MS free if I really had to. My children will soon leave the house, so that won't be my problem anymore. My wife's computer will either stay 2k or I'll *upgrade* her to Linux (she's the classic surf/email/OOo/solitaire type user).

      There are a very small number of "average joes" still running 95, 98 or ME. If you are an average joe who has purchased a new computer in the last 4 years, you're running XP with a very high degree of certainity.

      I will agree with you there, but I think you really underestimate the number of "ave. joes" still using older computers and the original OS. Most people do not upgrade computers, and only buy new ones when there old one "blows chunks". Of course, with all the spy/ad-ware, they may be fooled into doing that earlier than they really need to. :-)

    33. Re:Sorry Bill but you're full of shit by danheskett · · Score: 1

      No, we can't. It all depends on how you look at the masses. Ask any pollster, not all polls are equal.
      Win2k was never sold in retail outlets for "home PCs". It is not an OS for the masses.

      Heck, I just recently upgraded my children's computer from '98 to 2k. Why? For admin purposes not because '98 stopped working.
      That's fine. Great. Good for you. Doesn't change the fact that XP is installed on the largest base of PCs. It's the #1 MS desktop OS. If you have a PC purchased in the last 4 years, it's been based on XP very most likely.

      And personally, I have no plans to ever advance past 2k -- at least at home where I can control everything (work is different and is forced on me). I don't like phone home software, especially OS's.
      Great, go right ahead. That's up to you. Just so you know, there is no legitimate truth to the "phone home software" devious nature of XP, but if you want to hold that opinion based on something you heard once, go ahead.

      Most people do not upgrade computers
      Agreed. They just buy a new one. At 399 or 499 a whack, it's not a huge capital outlay like it was 15 years ago.

      Of course, with all the spy/ad-ware, they may be fooled into doing that earlier than they really need to. :-)
      I am sure that's happened. Quite a bit.

    34. Re:Sorry Bill but you're full of shit by clymere · · Score: 1

      not to nitpick but...if you were talking about when XP first shipped, you didn't bother to tell us. It doesn't say that in your post. Anywhere. And even if you were, its is pretty damn silly to argue about whats wrong with a product, lament "oh why don't they do this", when they already do. New peecees ship with SP2.

      --
      once you go slack, you never go back
  12. Re:BBC Bill Gates Interview Part 2: Security by mboverload · · Score: 1

    If DRM and the requirement to have a DX9 video card is what users want then he's right on.

  13. Pre-Scripted Questions? by Gnuosphere · · Score: 2, Insightful
    This 2-parter from BBC was about as exciting as watching a lawn-bowling match among seniors.


    The only challenging question was around the Euro case and Billy completely dodged the question as expected.

    Surely Bill often agrees to interviews with stipulations concerning what questions can be asked in advance - lame, but that's what you get with power. I find it odd that the BBC gets a 2-part interview with Gates and the topic of free software isn't brought up at all. Perhaps Bill is afraid to let slip another ignorant 'commie' remark.

    There is only one word to describe this interview...


    B O R I N G

    1. Re:Pre-Scripted Questions? by superskippy · · Score: 2, Informative

      Alas, the BBC really does show "lawn-bowling match among seniors" as top-flight sports coverage, because they can no longer afford the rights to anything decent.

    2. Re:Pre-Scripted Questions? by Dogtanian · · Score: 1

      Alas, the BBC really does show "lawn-bowling match among seniors" as top-flight sports coverage, because they can no longer afford the rights to anything decent.

      They've been showing stuff like that for years, long before they lost the rights to all those top-rank sports.

      (Channel 4- state-owned, but not part of the BBC- before they got the rights to show cricket, which they've since lost- used to show obscure sports, like Kabaddi (weird Indian thing) and, uh... American Football).

      Personally, I'm glad to see boring dross like cricket off the TV (always thought it looked more fun to play than watch), but I'd laugh if the sports that are no longer shown on terrestial TV began to experience a decline in popularity in a few years time (this won't happen with football, but it might happen with some other sports).

      Actually, even the football (soccer) clubs got bitten on the arse when they signed a massive deal with the non-free ITV Digital, who promptly went under, then had to go cap-in-hand to Rupert Murdoch.

      Actually, I hate Rupert Murdoch way more than I hate football clubs, so scratch that. But sod 'em anyway.

      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    3. Re:Pre-Scripted Questions? by Dogtanian · · Score: 1

      Channel 4 are not state-owned, they are paid for by advertisements,

      Whether they show ads or not is irrelevant to whether they are state-owned.

      at least any more - it was initially set up by the 1980 Broadcasting Act, but in 1990 it became a public corporation, but although it's not owned by the state, the government still exercises some control over it.

      Can you clarify what you mean? Channel 4 is not privately owned. I'm not sure how it's set up (yes, I know it's a corporation), but as far as I know, there's no private ownership.

      The fifth paragraph in this article states that Channel 4 is government-owned. As I said, I don't know how it's set up, whether the government own 100% of the shares, or what. I'd be interested to hear what you meant.

      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    4. Re:Pre-Scripted Questions? by Spoing · · Score: 1
      1. Alas, the BBC really does show "lawn-bowling match among seniors" as top-flight sports coverage, because they can no longer afford the rights to anything decent.

      What they export these days seems to be high quality. Even the crude old stuff was entertaining. That said, the list of good shows is fairly short on this end of the pond (USA) unless you include HBO's shows and everyone has to pay for that.

      --
      A firewall can not protect you from yourself. Turn off what you do not need. Do not use the firewall to do your work.
    5. Re:Pre-Scripted Questions? by Hognoxious · · Score: 1
      Channel 4- state-owned, but not part of the BBC- before they got the rights to show cricket, which they've since lost- used to show obscure sports, like Kabaddi (weird Indian thing) and, uh... American Football).
      Kabbadi rocks, it's a cross between British bulldogs and Rugby (without a ball). And don't forget the sumo wrestling - C4s coverage of that was excellent, with explanations of the rules and a bit of historical & cultural background. Not just "Ohh, look - a fatty!".
      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    6. Re:Pre-Scripted Questions? by Blakey+Rat · · Score: 1

      Maybe it's because nobody, apart from Slashdot, really cares if something is free software or not? Even if they use Firefox, they probably don't know or care that they could look at the source code if they wanted.

  14. But where's the beef? by ladybugfi · · Score: 4, Insightful

    OK, "security is top priority". As a security professional I think it's good that they've woken up.

    However, I'd really like to know what are they going to DO about it, apart from the traditional "we'll train our programmers". This is a key question especially considering that they have millions of code lines written before security was any kind of priority.

    I predict no radical changes to the number of discovered Microsoft software security flaws in the short term.

    1. Re:But where's the beef? by mboverload · · Score: 1
      They wont risk having legacy programs broken.

      I'm sure Microsoft could come up with a kick-ass OS, but they cant because of the HUGE base of programs which depend on the 9x/NT framework.

    2. Re:But where's the beef? by Blakey+Rat · · Score: 1

      Well, they're compiling everything now with that new compiler that supposedly prevents/eliminates buffer overflow errors. (I believe all of Windows XP SP2 was compiled with this compiler.) So that will help quite a bit.

      As for other types of security problems, I don't know enough to say.

    3. Re:But where's the beef? by silicon+not+in+the+v · · Score: 1
      OK, "security is top priority". As a security professional I think it's good that they've woken up.

      However, I'd really like to know what are they going to DO about it, apart from the traditional "we'll train our programmers". This is a key question especially considering that they have millions of code lines written before security was any kind of priority.

      I predict no radical changes to the number of discovered Microsoft software security flaws in the short term.
      They have been saying that for the past few years. I know it looks like we haven't been "seeing" any progress as more and more vulnerabilities are uncovered in XP and IE. We do have to keep in mind, though, that that stuff was already written before it was discovered what a security nightmare it was and this big "Security is our top priority" pledge. There's too much existing poorly-thought-out code base to just fix it. We will have to wait and see with their Longhorn release if they have really written it from correct, security-conscious design principles to evaluate if there is actual change behind the big talk.
      --
      We may experience some slight turbulence and then...explode. -Capt. Mal Reynolds
    4. Re:But where's the beef? by drsmithy · · Score: 1
      I predict no radical changes to the number of discovered Microsoft software security flaws in the short term.

      List some of these security *flaws* in Windows.

      Remember that a user deliberately running malicious code isn't a security flaw.

  15. advertising your weakness by rich42 · · Score: 5, Funny

    Ford: 'Quality is Job 1' Qwest: 'The Spirit of Service' Microsoft: 'trustworthy computing'

    1. Re:advertising your weakness by wkitchen · · Score: 1

      Oh come on. Ford isn't that bad.

  16. Re:BBC Bill Gates Interview Part 2: Security by tomstdenis · · Score: 2, Interesting

    "customers want" or more correctly "what he tells the customers they want".

    I'd pay good money to have him say on tape 10 good things about a Linux distro. The fact that he can't be objective means anything he has to say is totally worthless.

    Tom

    --
    Someday, I'll have a real sig.
  17. Best quote by rastos1 · · Score: 1
    With the computing experience you don't achieve full potential if you're having to worry about something like security.

    'nuff said.

  18. Trust by alext · · Score: 5, Insightful

    That's why we made trustworthy computing the top priority.

    An illuminating quote to choose because it is a complete non sequitur. And perhaps this isn't that obvious to everybody, even in sceptical /. land.

    In reality, there is no requirement for Microsoft to trust the software on my machine in order for me to trust it. The two relationships are quite distinct. I may choose to trust software that Microsoft has never heard of. Conversely, I may distrust software that MS has endorsed.

    The "trustworthy computing" soundbite has to be this vague because to pin down who is trusting whom to do what would immediately give the game away. The game is, of course, to encourage users to give up control of their PCs.

    1. Re:Trust by gnarlin · · Score: 1

      http://www.gnu.org/philosophy/can-you-trust.html
      This article is very illuminating.
      There may still lurk a few people who have not yet read it (and should).

      --
      A bad analogy is like a leaky screwdriver.
    2. Re:Trust by mboverload · · Score: 1

      Trustworthy computing has ntohing to do with security. It is about locking down the OS so DRM is more easily enforced.

    3. Re:Trust by strider44 · · Score: 1

      "Trustworthy" computing is DRM i.e. give control of your computer to Billy Gates.

      Isn't it logical? How could someone hack into someone elses computer when they don't have any control over their own computer?

    4. Re:Trust by rbarreira · · Score: 1

      What is happening/will happen with trusted computing:

      1- It's already being silently and slowly pushed towards us, in current hardware and software products.
      2- It'll get advertised as a good security measure for everyone's computers.
      3- The consumers who don't know about it (95% or more) will gladly buy those PC's
      4- Companies and governments will use it
      5- The other 5% (or less - us) will be forced to use it if they want to do almost anything with their computers
      6- ...
      7- Profit!

      The worse is, there is not much we can do to stop this...

      --

      The AACS key is NOT 0xF606EEFD628B1CA427BEA93A9CA9773F
  19. Re:Annoying by srjames · · Score: 3, Insightful

    The way Bill Gates takes credit for the advances of PC hardware.

    The marketshare of Windows is the reason for many "hardware advancements". Without a standardised operating system, hardware would have never been standardisted, and thus would have been unable to progress.

    How the solution to crappy software si faster updates.

    Almost any company will only make products that are as good as the customer wants them. This is why people buy economy priced cars and everyone is not driving BMWs. Sure a BMW is better, but it costs a lot more to produce and few people are willing to spend the extra money to own one. Would you be willing to pay three times as much for Windows if it were a much better product? I doubt it. Everyone complains because it costs $99 now.

    How the price of windows is pretty much dependent on how big you are (compare the retail price with the price paid by big companies)

    This is true for everything, in every business. When you buy in bulk, you get discounts. It's a common business practise.

    So, screw the little and small, cuddle the big !

    Would you buy a car that your neighbour built himself for one fifth the price of a "mass produced" car that you knew you'd never be able to find anyone to work on it? That doesn't make any sense. When you're buying a product that is going to need support you'll generally want a product that will have support available. Buying/using products that aren't widely used isn't a great practise. Especially in business.

    An if anybody try to complain, file a lawsuit for patent infringment..... surely there is a patent covering what you are doing now !

    Big companies will have a cartel of patents, only the small fish will be left out. A pity that the "people" do not know/care about this.


    Big companies get patents because they come up with original ideas and they patent them. It isn't their fault that someone else didn't come up with the idea first or was too lazy to patent it.

    Just remember that Microsoft was, at one time, a small company. They obviously did *something* right.

    Quit your bitching, because it really doesn't matter. Microsoft is here, they own a majority of the desktop market, and they're not going away anytime soon. Linux, or other free software, is not a viable replacement at this point. I believe everyone already knows that.

    Microsoft is not the first huge company to dominate an entire market.

  20. jeremy paxman by smallguy78 · · Score: 1

    if only the BBC presenter http://www.bbc.co.uk/pressoffice/biographies/biogs /news/jeremypaxman.shtml Jeremy Paxman had asked the question:

    'And Europe too fined you for being anti-competitive. Did you ever pause for a moment and think: 'are we being anti-competitive?'

    We wouldn't have got the lame response waffling about the PC industry, we would've could a half-honest response. Instead they chose Stephen Cole, a bumbling idiot with a lisp.

    --
    Nothing costs nothing
    1. Re:jeremy paxman by MartinG · · Score: 4, Insightful

      So you didn't see the Paxman' Gates interview a few years ago then? Whoever researched for Paxman should have been fired. The questions were so vague that Gates could have said anything and it seemed like an answer. Secondly, Paxman (great though he is) could't really full understand the answers and so wasn't in a position to say "you are just avoiding the question" because he wasn't sure enough.

      Honestly, Paxman is brilliant, but I could have interviewed Bill Gates better than that. (and that's saying something)

      --
      -- MartinG To mail me: echo kewyjlcxyzvjfxbqwh | tr bcefhjklqvwxyz .@adgimnoprstu
    2. Re:jeremy paxman by bananasfalklands · · Score: 1

      Tony Blair has refused 20 interviews with him since the last election in the UK. If he scares the shit out of Blair

      Brits here will know they are still talking about Michael Howard's (now leader of the opposition) interview with Paxman of some years ago when he refused to answer a question seven times. he does not do Paxman either.

      You only do Paxman when you really have no choice.

      --
      Send Peter Clifford Francis Macrae comdoms to 23 Bedford St, St.Neots, PE19 1AX, England
    3. Re:jeremy paxman by Dogtanian · · Score: 1

      We wouldn't have got the lame response waffling about the PC industry, we would've could a half-honest response. Instead they chose Stephen Cole, a bumbling idiot with a lisp.

      I've seen him reading news on BBC News 24 (*), and he seems competent enough doing that; however, on Click Online he comes across as trying to be amiable, and not frighten techno-phobes off.

      Ironically, this sums up Click Online, which is no better than the similarly crap 'The Net' 10 years ago.

      There are very few computer programmes on British TV, let alone ones that aren't about games, let alone ones that are any good. What is it with TV people that they feel producing a computer programme with *any* technical content is going to frighten people off?

      In general, I'm getting very disillusioned with TV. I think the problems are fundamental; TV is a low-content medium. I can watch a 50 minute program and figure if they'd left out the BS, they could have made an interesting 20 minute program.

      Worse, I think it *is* possible to produce good, solid TV, but it doesn't seem to happen. The BBC's "Horizon" slot has gone from a reasonably in-depth science program to something that concentrates way too much on visual tricks and "human interest".

      Don't get me wrong; there is a place for popular science, but not as a replacement for serious stuff. I wish it would replace those endless shitty lifestyle programs that don't actually *teach* you anything.

      TV is cliched as well, but I could go on about that for weeks...

      Basically, it's annoying that I don't read books because I associate them with work and no fun, because when I do find myself casually flipping through them, they're a hell of a lot more interesting and entertaining than TV usually is.

      (*) Click Online is shown in Britain on News 24; it used to say it was produced for "BBC World"; i.e. the overseas TV services, but that's no longer on it.

      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    4. Re:jeremy paxman by Politburo · · Score: 1

      Honestly, Paxman is brilliant

      Honestly, he can't be that brilliant if we went as unprepared to an interview as you describe.

    5. Re:jeremy paxman by donothingsuccessfull · · Score: 1
      Honestly, Paxman is brilliant, but I could have interviewed Bill Gates better than that. (and that's saying something)
      Have you seen him on University Challenge?
      Someone confuses Aeschylus and Sophocles and he sneers.
      Someone takes a guess in a sci/tech question, "err, entropy ... increases", and he greets it with bewildered awe.
      Learned helplessness in action.
    6. Re:jeremy paxman by donothingsuccessfull · · Score: 1
      Don't get me wrong; there is a place for popular science, but not as a replacement for serious stuff. I wish it would replace those endless shitty lifestyle programs that don't actually *teach* you anything.
      http://www.bbc.co.uk/radio4/ it's teh rox0rs.
    7. Re:jeremy paxman by Dogtanian · · Score: 1

      Radio 4 isn't TV, though. :)

      And, actually I *was* listening to a science programme on Radio 4 in the shower yesterday morning.

      Radio 4's problem is that many of its programmes give the impression of being aimed at middle-England, middle-aged, middle-of-the-road types. These are the types of rabid, letter-writing "core" listeners to the station that make those in charge fearful of change.

      And radio drama is pretty horrid; it doesn't sound "natural" at all to me. Maybe that's what gets on my nerves about it. OTOH, TV drama isn't that naturalistic either, but perhaps I'm more used to its particular style.

      But yeah, there is some good stuff on Radio 4 if you don't let the fuddy-duddy stuff put you off.

      --
      "Slashdot - News and Chat Sites Deviant". (Click "homepage" link above for details).
    8. Re:jeremy paxman by donothingsuccessfull · · Score: 1
      Radio 4 isn't TV, though. :)
      Good thing too.
      You can't have Horizon type filler (background music, soft focus test-tubes every five minutes) on the radio, they actually have to *say* something.
      I used to like Material World, unfortunately I work now.

      Radio 4's problem is that many of its programmes give the impression of being aimed at middle-England, middle-aged, middle-of-the-road types. These are the types of rabid, letter-writing "core" listeners to the station that make those in charge fearful of change.
      I sort of view them like the house of lords, Daily Mail reading reactionary kooks to a man, but they stop the worst excesses of Blairite reform.
      The You and Your Moneyboxes are the stones under which the really interesting things scuttle.
      Alan Moore's worship of an ancient Roman sock puppet snake god springs to mind.
      http://www.bbc.co.uk/radio4/comedy/chainreaction.s html
      If you want to hear *really* conservative radio try daytime Radio 1.
  21. Re:Annoying by mboverload · · Score: 1
    Secure software does not take much money to produce. In fact, it takes no money at all!

    BSD (even if it's dead, hehe) and Linux can all show you this.

  22. someone didn't buy microsoft dictionary (C) by chalkoutline · · Score: 1

    He says certainly too much!

    --
    There are 2 types of people in the world, those who find that stupid binary joke funny, and those who don't.
  23. Re:Annoying by srjames · · Score: 2, Insightful

    BSD (even if it's dead, hehe) and Linux aren't usable for most people.

    A machine running MS DOS with no internet connection is even more secure, but it isn't useful.

    A car with no engine won't get stolen, but I can't drive it anywhere to use it.

    Look at it this way:

    I could give my girlfriend a new computer, sans operating system and a windows disc, she could install it, install her software and do all the things she wants to do with it in a couple of hours. I can't give her a linux cd and expect the same results.

    Now do you honestly think she'll give a fuck about how secure the system is if she can't even use it?

    Of course not.

  24. Re:Annoying by mboverload · · Score: 1
    Any computer without an internert connection is a fortress. Unless, of course, you somehow get a virus on a floppy.

    *engage old-skool virus flashbacks*

  25. Good ideas implemted incroectly. by jellomizer · · Score: 4, Insightful

    The problem with microsoft security is not what they are doing but more how they are doing it. Security needs to be #1 in design. Then you build features on top of that (Without breaking security). For example some application want to run as administrator even if they don't need too (Like word perfect spell check) I can understand installing applications as administrator but administrator should not be allowed to run these application. Windows need a redesign for high security not plugging the holes in the existing version. Expect there will be holes in your OS but make it to minimize the dammage. Windows is like Setting up a Linux Apache Server where the user access it runs on is Root not Nobody. So if someone breaks into Apache then they get this limited access where they could at worse mess up and steel data from the website. But with the windows settings all services are under administrator when someone breaks in they have full access to the system.

    --
    If something is so important that you feel the need to post it on the internet... It probably isn't that important.
  26. Anything I want. by Anonymous Coward · · Score: 1, Funny
    Longhorn is a super important release for us because it takes all the feedback we've received from users over a number of years and lets us do something dramatic to address anything they want.
    Finally comes preinstalled with porn! That should save some time.
  27. Re:Annoying by jawtheshark · · Score: 3, Insightful
    I could give my girlfriend a new computer, sans operating system and a windows disc, she could install it, install her software and do all the things she wants to do with it in a couple of hours

    Are you dreaming? (Assuming your girlfriend is not a geek) Have you got any idea how many drivers won't be found (even by XP) with current hardware (you said "new"). If XP will detect it, it will be sub-optimal at best. Then I'm not even speaking about the fact that installing XP will probably not be XP2. Has your (non-geek) girlfriend a CD handy with SP2 on it?

    Look, I can understand what you try to prove, but let's be reasonable: installing a PC from scratch is not easy.... not with Windows, not with Linux. There will be questions that the user can't respond to.

    As for "not possible with Linux": I'm typing this from an Ubuntu Linux machine. (Installed yesterday, I'm getting my first impressions) The only thing that I needed to install separately was the SMP packages, but a normal user doesn't have SMP in the first place. Still, the questions asked during the install were easy (even for an average user) but my girlfriend couldn't do it.

    Users do not install machines, and if they do the machines won't last long. Admins install machines... That's the way it is (for the moment)

    Notable exception would be Mac OS X, where you just stick in CD's and answer newbie questions. Apple just has the "known-hardware" advantage.

    --
    Ahhh...the great dumpster continuum. Many a free computer will be found there. -- sowth (748135)
  28. Set up like a bowling pin by salesgeek · · Score: 1

    I wonder if MS has fully sized up the impact of the bad press and user response they *will* get when the first exploit that uses trusted computing emerges.

    It *will* happen and it *will* be a cataclysm for MS.

    --
    -- $G
  29. Pilgrims Progress Approach Vs Infect,Scan,Remove by NZheretic · · Score: 4, Informative
    Microsoft's desktop security issues stem from its reliance on the Antivirus industries "Infect-Scan-Remove" approach.

    In comparison, right from the outset, open source desktop platforms and applications have relied almost wholly on closing the infectable vectors, the exploited vulnerabilities used by malware, as quickly as possible.

    Read the following Usenet thread from 2000 that covers the argument in detail. David Harley and Robert Moir are two Anitvirus industry leaders. It also includes the prediction that Microsoft would eventually get into the antivirus industry.

    If you have a spare hour, listen to Dr Dobbs' technetcast:

    Dr. Blaine Burnham, Director, Georgia Tech Information Security Center (GTISC) and previously with the National Security Agency (NSA), gives an overview of current encryption and security technologies and outlines possible strategies for future defense. 9th USENIX Security Symposium, Keynote MP3 [2000-10-09] (57min)
  30. Slashdot Interview!! by redGiraffe · · Score: 4, Interesting

    Hey

    Can't we organize a Slashdot interview of BG? (titter :)

    1. Re:Slashdot Interview!! by Dunbal · · Score: 1

      I move to pettition the slashdot interviewer to remove Mr. Gates' blindfold and gag, untie him, and extinguish the fire before proceeding with the interview... after all I want to hear what he answers not "mmmm mmmm mmm yaaaaaaaaaaaaaaa sizzle crackle pop" :)

      --
      Seven puppies were harmed during the making of this post.
    2. Re:Slashdot Interview!! by That's+Unpossible! · · Score: 1
      --
      Ironically, the word ironically is often used incorrectly.
    3. Re:Slashdot Interview!! by ceeam · · Score: 1

      Do you _really_ wish to see a virtual bukkake?

  31. Re:Annoying by Anonymous Coward · · Score: 1, Insightful

    Without a standardised operating system, hardware would have never been standardisted, and thus would have been unable to progress.

    You sure as hell got that backwards! First came the standard hardware, then came the standard OS. IBM created the standard hardware environment and Microsoft rode the crest of that wave to where they are now.

    Big companies get patents because they come up with original ideas and they patent them. It isn't their fault that someone else didn't come up with the idea first or was too lazy to patent it.

    First of all, this is totally irrelevant in a discussion about Microsoft. They seldom came up with original ideas. Secondly, too lazy to patent? yeah, that must be it; all them lazy inventors out there that just let companies steal their ideas. Why didn't I think of that?

    Just remember that Microsoft was, at one time, a small company. They obviously did *something* right.

    There it is again. The old "They are rich, they must be right!" argument.

    Linux, or other free software, is not a viable replacement at this point. I believe everyone already knows that.

    You are absolutely right! I urge you to sink every penny you have into Microsoft stock.

  32. Re:Annoying by Anonymous Coward · · Score: 1, Insightful
    Microsoft is not the first huge company to dominate an entire market.

    Precisely


    The key question is "did they do it legally?"

    And the answer on two continents is no

    Don't argue

    That's precisely what those two court cases mean. Microsoft dominates the market due to its illegal activities.

    And they don't need your baby-Adam-Smith philosophy to defend them. They're quite big enough to do it on their own (by buying the politicians they need)

  33. [tt]:BBC Bill Gates Interview Part 2: Security by tomhudson · · Score: 4, Funny
    That longhorn "incorporates all the users desires" ...
    What - free porn?

    Both Bill Gates and drug dealers

    1. call their customers "users".
    2. lie, telling their customers "it's safe, it's good, you'll LIKE it"
    3. resort to strong-arm pressure tactics when their monopolies are in danger
    4. make obscene profits
    5. have no concern about bending a few laws
    1. Re:[tt]:BBC Bill Gates Interview Part 2: Security by superpulpsicle · · Score: 1

      Bend a few laws? Bill Gates bend more laws than Saddam Hussein.

    2. Re:[tt]:BBC Bill Gates Interview Part 2: Security by Da+Twink+Daddy · · Score: 1

      Yeah, but drug dealers have a lot in common with the other side, too.

      Both Linux and drug dealers:

      1. call their customers "users",
      2. lie, telling the customers "it's done, it's compatible, you'll LIKE it",
      3. give the first "hit" away for "free"
      4. make their customer pay in time and mental sability, and
      5. realize that laws sometimes need to be broken.

      PS: I'm not trolling!

    3. Re:[tt]:BBC Bill Gates Interview Part 2: Security by tomhudson · · Score: 1
      Yeah, but drug dealers have a lot in common with the other side, too.

      Both Linux and drug dealers:
      I'll bite :-)
      1. call their customers "users",
      ... nah, this is war, and we call them prisoners. Just look at the credits in pysol - total world domination!!!
      2. lie, telling the customers "it's done, it's compatible, you'll LIKE it",
      no, those are the lies we tell each other ... but it keeps getting to be less of a lie with each year ... at least that's what the voices in my head keep telling me ...
      3. give the first "hit" away for "free"
      but unlike the drug dealers, we keep giving it away for free. F/OSS - the gift that keeps on giving.
      Sort of like AIDS or Herpes in that respect - or did you miss Uncle Billy's lectures on the viral nature of "Open Sores Softwarez".
      4. make their customer pay in time and mental s(t)ability, and
      As someone once said - unix is user - friendly, it's just choosy about who its friends are.
      The same is true of Linux.
      You've got to own at least one grubby T-shirt, one pair of completely worn-out runners, and one piece of equipment so archaic that only you can get it to run.
      5. realize that laws sometimes need to be broken.
      ... you mis-spelled "legs" ...
      PS: I'm not trolling!
      Denial is the first symptom.
      We have a program to help you here.
      Group therapy every Tuesday.
  34. Click Online by jb.hl.com · · Score: 3, Informative

    Maybe off topic but may as well say: Click Online is a very Microsoft centric TV programme which is shown on BBC World internationally and on BBC News 24 in the UK. It tends to be very dumbed down and barely scratches the surface on a lot of subjects. I remember one show where they were discussing distributed computing, and had a cluster of Windows 9x boxes (!) all of which duly blue-screened. Ahh, memories. If only the BBC actually did a serious tech show :(

    --
    By summer it was all gone...now shesmovedon. --
    1. Re:Click Online by displaced80 · · Score: 1

      This is indeed a shame. And doubly-so, as there certianly is (or at least was) the understanding at the BBC to really communicate technology issues.

      In the 1980s, the BBC's shows on programming and computer science (produced in association with the Open University) were partly responsible for a whole generation of British I.T. workers and enthusiasts. The public effectively had free access to undergraduate level (or higher) course materials, right on their TV... albeit at some unholy time in the morning.

      Sadly, there seems to be little technical reporting these days. It's not like they're short for time on the feature-devoid BBC News 24. I blame the producers and the commissioners.

      --
      What's the frequency, Kenneth?
    2. Re:Click Online by speculatrix · · Score: 1

      To be fair, the BBC are catering to a society who've been happily accepting dumbed-down and biassed TV, Newspapers etc. UK citizens have released their grip on what's important.

      Proof positive:

      1) more people vote for reality-TV shows like Big Brother than for real-life elections for councils an governments.

      2) there was more publicity given to the anti fox-hunting bill than the Civil Contingencies Bill, which was perhaps the most important piece of legislation for 50 years, allowing the gov't to suspend any law and impose martial law merely by insinuating there is a threat.

  35. But his doodles indicate . . . by sbergstrom · · Score: 1

    . . . that he is stressed, tense, not a natural leader, and struggling to concentrate. Something ELSE you want to tell us, Bill?

    --

    Love, Stu
  36. Certainly untrustworthy by Sox2 · · Score: 1

    He uses the word certainly too often for my liking. Is he trying to reassure us of something?

  37. Re:Even better by Anonymous Coward · · Score: 1, Funny

    Bill Gates talking about security? Thats like John Ascroft talking about his assistant's rack.

    I'm confused by your analogy. Do you mean that Ashcroft initially ignored his assistant's rack, and now, after realizing that everybody else thinks it's important, is feverishly and unsuccessfully trying to enhance it?

  38. Longhaul! by QuantumG · · Score: 1

    Hehe, Cole asked Bill about "longhaul" about 3 times and Bill didn't get it. You can see Cole smile just as the camera pulls away.

    --
    How we know is more important than what we know.
  39. Re:Good ideas implemented incorrectly. by damieng · · Score: 1

    > Security needs to be #1 in design

    Uou mean like Unix was? Or more correctly wasn't. In fact Dennis Ritchie wrote about UNIX: "It was not designed from the start to be secure. It was designed with the necessary characteristics to make security serviceable."

    And of course, this from the same people who brought us the C language which makes writing code to buffer overrun a virtue of simplicity leading to the number one cause of vulnerabilities today.

    As for Windows services, not all execute with Administrator permissions. IIS for example runs under an anonymous IUSR_computername account that is highly restricted. In my experience any web server setup by a competent Windows admin is as secure as one setup by a competent Linux admin.

    Windows bad reputation is at least partly to blame on the sort of users it attracts. Most Windows end-users can not tell the OS from the apps, rarely update and have no idea what clicking Yes to warnings in their web browser is actually doing.

    How many Unix users could you say the same of?

    Windows XP SP2 is a whole lot better, and coupled with either a locked-down IE or Firefox install and a good updating anti-virus makes for a system that is secure and easy to use.

    This MS security bashing is getting old.

    --
    [)amien
  40. Re:Pilgrims Progress Approach Vs Infect,Scan,Remov by QuantumG · · Score: 1

    Open source desktop platforms are wide open. There has been one innovation in software installation and that is the ROX Desktop. The concept being zero-install. You don't need to have root to install an application (any application) and you don't need any special privledges to run it. You simply can't run an app that doesn't come from a trusted source. The only part of the disk that applications need to be able to write to is a directory to store the user's preferences for that application and a directory to store documents created by that application. Maybe when we have more innovation on the desktop we'll get to this ideal where an application simply can't "spread" like a virus, be it by maliciously modifying other applications or by maliciously modifying documents used by users on other machines.

    --
    How we know is more important than what we know.
  41. Sounds like he is preparing to run for office by innerweb · · Score: 1
    He manages to not answer the hard questions and then provide fluff for most of the rest of the questions.

    Reminds me of a few friends who are in office and how they answer questions, even non-political ones.

    InnerWeb

    --
    Freud might say that Intelligent Design is religion's ID.
  42. Book 'em by daminotaur · · Score: 1
    Gates is right that there are a lot of malicious people (usually young dweebs with some kind of Oedipal complex against Microsoft) out there. An operating system will never be bulletproof against such attacks (just read Goedel, Escher, Bach).

    The way to control it is to lock malicious hackers up for a long long time. The message has to go out that, contrary to the movie War Games, this is not a game, and you may end up in jail for ten years.

    The sentence this week for one of the MS Blaster perps (18 months) was inadequate, but a start. It's not really enough of a punishment. They need to know: release a virus and ten years of your life will be snuffed out.

    Vigorous prosecution put the kibosh on phreaking, and it will do so for malicious hacking too. Of course it will never be eliminated, but incarceration and social ostracism will take most of the wind out of their sails.

    1. Re:Book 'em by deadweight · · Score: 1

      "Vigorous prosecution put the kibosh on phreaking" I would say very cheap long distance was what got rid of most phreaking. When the telco was an expensive monopoly, everyone wanted to screw them. Now that competition has made phone service dirt cheap, why bother? There is a lesson there!

    2. Re:Book 'em by deadweight · · Score: 1

      Phreaking is now actually pretty useless, IMHO, as a way around telco charges. You won't get caught if you never call anyone you know or from anywhere identifiable, but then it isn't really much use as phone service :( Besides, hasn't cell phone cloning pretty much turned into a purely criminal enterprise? I doubt any of them give a shit about the tech other than how to make money with it.

    3. Re:Book 'em by argent · · Score: 1

      An operating system will never be bulletproof against such attacks (just read Goedel, Escher, Bach).

      That's nice, but microsoft's "security" model, particularly in their Internet clients, doesn't even try to be bulletproof. It's barely cream-pie-proof.

      In GEB terms, Windows is like a record player with a thermite charge wired to the "on" switch.

  43. Trustworthy Computing? by qwertphobia · · Score: 1

    Didn't Trustworthy Computing used to be about DRM? How did it suddenly turn around to mean information security?

    --
    Never ask for directions from a two-headed tourist! -Big Bird
    1. Re:Trustworthy Computing? by quarkscat · · Score: 1

      It's really quite easy to follow. With a
      Palladium/Trusted Computing platform, MSFT
      can relinquish all responsibility for designing
      a secure OS to the hardware. After all, only
      MS certified viri, malware, and worms will be
      able to run on "Longhorn" sitting on the TC
      platform, right?

      At least, that appears to be the MSFT plan.
      Since MSFT will not be releasing an "SDK for
      Viri Writers", their "Longhorn" will be just
      as safe as XP-SP2. I can hardly wait...

  44. Re:BBC Bill Gates Interview Part 2: Security by tomstdenis · · Score: 2, Interesting

    I hate windows and I can name several good things about it.

    - Standard kernel API [a lot of what was written for as far back as win 3.1 will still work today]
    - User interface [apis] are effective and the resulting "experience" is user friendly
    - The kernel is largely stable except when errant drivers take it down
    - Lots of games for windows

    About gates personally?

    - Donates considerable bank to charities
    - Oraganizes sporting events for his employees
    - Provides a challenging and innovative workplace

    I'm sure working for MSFT has it's faults [namely you couldn't get away with using Gentoo] but if you didn't care about the OS wars then it wouldn't matter.

    Tom

    --
    Someday, I'll have a real sig.
  45. Microsoft definition of trusted.. by Anonymous Coward · · Score: 1, Informative

    The thing is, when microsost says 'trusted computing' they want you to think that this means you trusting mucrosoft.

    It means nothing of the sort, it means industry trusting microsoft to deliver DRM crippled content, this way Microsoft can tie up everyones computer by sayiung 'you can trust us' so that nothing can run or be stored without industry (the 'rights' holders) giving their OK, this will remove the risk of virus and malware attacks because they just won't be able to run.

    Interestingly, Microsoft hasn't actually done anythg special to secure it's OS, it's just endorsed pretty much any DRM scheme indistry cares to propose -they aim to secure a 'trusted' status simply by telling enough of the people who matter (CEOs and Governments) that they can't possibly trust anything open that doesn't come from Microsoft.

    It's like I always say, Microsoft is all about redefinition. If something comes along that Microsoft think is a threat ('Innivation', 'open', 'trusted') they just decide what THEY want the word to mean and then feed that to anyone who'll listen.

  46. Trusted Build Agents and secure the desktops by NZheretic · · Score: 1
    QuantumG wrote: "You simply can't run an app that doesn't come from a trusted source"

    Trusted Build Agents are the final twelth step in my Twelve Step TrustABLE IT blog entry.

    Also is already possible to secure Linux desktops the "right way"

    (#75791 by guest NZheretic in response to Mainstream means more malicious code for Linux (SearchSecurity.com).)

    On Windows, most of the viruses are e-mail borne. On the Linux side, today and in the future, viruses are network-aware, and [they] take advantage of vulnerabilities in networks or systems to infect machines. The Slapper worm, for example, attacked vulnerabilities in OpenSSL and Apache.

    I have deployed Linux on the desktop (RH8+Ximian to RH9+StarOffice) in an enterprise and they do not suffer from such problems for long.
    1) The only network service the desktop systems expose is OpenSSH and the Iptables limit access from only three addresses.( We use a custom script with ssh to keep the systems rpms uptodate from a private mirror).
    2) The iptables are configured to allow the desktops client services to connect only to the specified server.
    3) The /usr partions are mounted read only and the /tmp, /home, /var directories are mounted non executable.
    4) None of the users have, or need, root access. They have access to printer setting etc via Webmin's Usermin which runs on a dedicated server.
    5) Mounting the users home directory required shares etc ( we use Samba for domain, file and print services ) is performed by script when the user logs in.
    6) We update all the desktops within minutes of a updated RPM package becoming available. The window of opportunity for any disclosed vulnerability is very small.
    7) We schedule Tripwire to check the intergrity of the desktops a couple time a day.

  47. Quote from the first part of the interview by terrencefw · · Score: 1
    Interviewer: "It is a tricky area though. Digital rights management. Are you sure that you are not worried that it could trip you up?"

    Trojaned windows media files anyone? ;-)

    --
    Like tinyurl, but one letter less! http://qurl.co.uk/
  48. Twelve Step TrustABLE IT : VLSBs in VDNZs From TBA by NZheretic · · Score: 1
  49. Yup by Lifewish · · Score: 1

    We don't get screwed over.

    --
    For the love of God, please learn to spell "ridiculous"!!!
  50. Some reality distortion here.. by TeknoHog · · Score: 4, Insightful
    From the article:
    Stephen Cole:

    Are you a victim perhaps of your own success? Being the biggest, you are always going to be under attack.

    Bill Gates:

    And we're always able to do the best R&D, the best innovation, get the best partnerships.

    Certainly our position is one that people envy.

    First of all, the interviewer asked about the problems of being the biggest, whereas Gates went on to ramble on their being the best. What the heck was the point in that?

    Secondly, if they truly were the best, they wouldn't have all those security problems, now would they?

    This is my ongoing number one gripe about Microsoft: they cannot admit their mistakes. Though every OS has security issues, MS is practically the only one that keeps lying about it. Technical quality aside, I'll rather deal with honest people and honest businesses.

    --
    Escher was the first MC and Giger invented the HR department.
    1. Re:Some reality distortion here.. by Tim+Browse · · Score: 1

      They could have done with Paxman doing the interview instead, really.

      "Did you threaten to remove Netscape?"

      :-)

    2. Re:Some reality distortion here.. by l3v1 · · Score: 1

      Secondly, if they truly were the best, they wouldn't have all those security problems, now would they?

      I believe being the best is not about not having bugs and holes. It's in the way you handle those problems. Judging along this line, M$ is far, very far from being "the best".

      --
      I am putting myself to the fullest possible use, which is all I can think that any conscious entity can ever hope to do.
  51. Re:Annoying by ookaze · · Score: 1

    The marketshare of Windows is the reason for many "hardware advancements". Without a standardised operating system, hardware would have never been standardisted, and thus would have been unable to progress.

    Wrong, it is not "the" reason, at most it is one of the reasons.
    USB did not take off (and were even dismissed by Windows mags at the time) before Apple integrated it in their Mac.
    And when Apple did that, they were laughed at by the Windows folks ...
    And Apple sure did not have the Windows market share.
    I could say the same for FireWire, even nowadays, FireWire is still dismissed by a lot of people.
    And second sentence is false, because there is no "standardised OS". Or define that. Is it Windows 98 ?

    Almost any company will only make products that are as good as the customer wants them.
    This is why people buy economy priced cars and everyone is not driving BMWs.


    You are making it backwards. Even worse, you mix customer and consumer.
    Given the price of a car, car companies are still forced to treat you as a customer.
    When you buy Windows, you are just a consumer. The $99 price include almost NO service.
    You do not even have a useful complete printed manual with Windows (hence all the books sold for that).
    WAY different from a car where you can even make the price go down.

    Sure a BMW is better, but it costs a lot more to produce and few people are willing to spend the extra money to own one.
    Would you be willing to pay three times as much for Windows if it were a much better product? I doubt it.
    Everyone complains because it costs $99 now.


    I'm not sure about your "BMW is bette. Certainly it is not for me.
    You are confused about "it is more expensive and everyone know it, so I can show off" against "it is better".
    Why do you think there are quotas on japanese cars (even here in Europe) that gives you more bang for the bucks ?
    As in japanese cars are better and yet cheaper ...
    Windows is not the better product. Would you have talked about Apple, it would have been more believable.

    This is true for everything, in every business. When you buy in bulk, you get discounts.
    It's a common business practise.


    Wrong again. A lot of businesses buy by bulk, and make YOU, the consumer, profit on the discount.
    The businesses make their living by selling big quantities. I think they are called discounters in american.
    As the focus was on the consumer, you end up NOT buying in bulk, and STILL getting the discounts.

    Would you buy a car that your neighbour built himself for one fifth the price of a "mass produced" car
    that you knew you'd never be able to find anyone to work on it? That doesn't make any sense.
    When you're buying a product that is going to need support you'll generally want a product that will have support
    available. Buying/using products that aren't widely used isn't a great practise. Especially in business.


    Good try. Except that in the real case discussed here, there IS support, so you WILL find someone to work on it.
    And even if every one followed your "great practises", mankind would still be stuck in stone age.

    Big companies get patents because they come up with original ideas and they patent them.
    It isn't their fault that someone else didn't come up with the idea first or was too lazy to patent it.


    OMG, amazing ! I understand now, you are completely brainwashed, specially if you truly believe that !!

    Just remember that Microsoft was, at one time, a small company. They obviously did *something* right.

    Yes, "something" : they screwed a bigger one. Doing sth right is not the same as doing sth righteously.

    Quit your bitching, because it really doesn't matter. Microsoft is here, they own a majority of the desktop market,
    and they're not going away anytime soon.


    Even sitting on your elephant, you should beware the mouse

  52. Re:share directories by zmollusc · · Score: 1

    Hey, that's what i found when i was trying to set up a shared directory for multiple users on a friend's xp box. "Yeah, well as admin i make a new folder called sharedstuff, then we share it and set non admin people to read only.....er....where's the dialog?....erm.....it must be in user accounts....er....where is it?.....wtf?....."

    --
    They whose government reduces their essential liberties for temporary security, receive neither liberty nor security.
  53. A couple of points by Lifewish · · Score: 1

    I broadly agree - this is, after all, what law is for. However, I'd make a couple of additional points:

    - The punk with a shell exploit today stands a decent chance of being the computer expert of tomorrow. Educate them; don't destroy them.

    - Prosecution should never ever EVER be considered a solution to the problem of dodgy security. That's just asking for an Independence Day scenario where one Irani (for example) hacker brings down all the American motherships the moment war breaks out.

    --
    For the love of God, please learn to spell "ridiculous"!!!
  54. boring Bill... by seven+of+five · · Score: 1

    please please please say something not completely predictable. thank you.

    1. Re:boring Bill... by smallguy78 · · Score: 1

      the same applies to these slashdot comments please

      --
      Nothing costs nothing
  55. Billy's "todo" list - #1 distract from F/OSS by SgtChaireBourne · · Score: 1
    Chairman Bill is doing the interview to fulfill the first item on his TODO list which is to distract the public.

    Why? Only he can say for sure, but possible reasons could be:

    You get the picture.
    --
    Beta is broken and the link to classic doesn't work. Stop wasting our time or there won't be anybody left here.
  56. They've made progress by bitswapper · · Score: 1


    If you look at things like spam, we feel very good about the progress there.

    Thanks to poor design, Outlook now helps spammers(worms and viruses) innovate more than ever.

    ---
    This was interesting also, regarding the timeline for longhorn: We're targeting 2006 but that isn't in any sense an exact date.

    For a 'genius', he certainly understands that a year is not the same as an exact date.

    ---
    I wish I could get an exact date....

    1. Re:They've made progress by l3v1 · · Score: 1

      we feel very good about the progress there

      :) right, let's make some dictionary changes: progress: (n) (invented by Microsoft in the 200x's) process of buying up other companies to hide or cover one's inability to solve problems

      --
      I am putting myself to the fullest possible use, which is all I can think that any conscious entity can ever hope to do.
    2. Re:They've made progress by drsmithy · · Score: 1
      Thanks to poor design, Outlook now helps spammers(worms and viruses) innovate more than ever.

      How so ?

    3. Re:They've made progress by bitswapper · · Score: 1

      It has too many automation abilities. No mail client needs to be able to launch applications or retreive all the addresses in an address book and mail a message to all of them. The integration and automation capabilities were added at one point in time perhaps with the thought in mind that people would send a mail message that would start a IP telephony connection upon being opened, for example. Or play a song, a movie - the list could go on and on.

      These abilities were added with nary a "what if" it seems. Before people started exploiting outlook's ability to spam, I heard a microsoft rep say once that "all our applications will have email capabilities". When I asked him why, he said so people could click a button in word and mail it to someone.

      That response reflected a general attitude of throwing every possible feature into a software program, whether it made real sense or not. If people want to email a word document, they just need to learn how email works.

      Instead, Microsoft should have just focused on making a better email client, one with the Internet in mind, as opposed to throwing resources into adding features without ever asking why.

      I think at a deeper level is that Microsoft's corporate culture is still not very Internet-centric. They constantly try to pollute Internet standards; they constantly try to centralize functionality (with them); they constantly try to hide things - it seems like their way of thinking and the kind of thinking that drove the development of the internet are just too different.

      It really seems as if Microsoft and the Internet will never get along.

  57. Well, Mr Gates by CaptainZapp · · Score: 1
    'Certainly you can never underestimate the level of malicious people out there who are going to try to take advantage of whatever things there are. That's why we made trustworthy computing the top priority.'

    I trust my computer just fine; thank you very much.

    Now if you, your company, Disney, the MPAA & RIAA etc. don't trust my computer that's really not my fucking problem. Doncha think?

    Yes, I am aware that you sayd trustworthy and no trusted computing. Nevertheless, a faint, cold fear thrills through my veins when I observe execs, pr shills, spin doctors and other professional liars preparing the rethoric ground to matter of factly take my computer away.

    --
    ich bin der musikant

    mit taschenrechner in der hand

    kraftwerk

  58. Bill thinks we're lucky by bitswapper · · Score: 1


    "People would be very lucky if other sectors of the economy worked as well as the PC industry."

    But not very lucky if other products worked as well as windows

  59. HULK SMASH! by DarthVain · · Score: 1

    Anger increasing....

    This would be slightly funny if not for the fact that I HAVE to read this at work, as my home computer (which is outside of a well defended government network) is a wriggling mass of Trojans/Worms/viruses/spyware/adware... I am running 10 or 12 different anti-virus software in a futile attempt to clean it up. It is screwed. I have a feeling I will have to FORMAT and lose all my data (20GB + 120GB + 60GBx2).

    All I have to say is "Trojan Downloader" sucks some ass big time, it can really ruin your day. If you see anything popup about a "INF installer" while you are surfing with IE (which I will NEVER EVER do again, well at work maybe), pull the plug. Press the off switch. cut the line.

    I have disinfected most of the baddies, but more always seem to come up... The best part is the more I "disinfect" and basically delete files, inevedibly critical system files get chewed... so now XP is wildly unstable as well, not to mention my internet connection is also severered (which may be a blessing in discise).

    So right now I have a process called svchost.exe runing my CPU at 99% and at least one bit of adware hidden away somewhere I cannot fathom. The one good side to this coin (not for me), is that I am seriously considering an OS move, I am so mad. I have downloaded the latest versions of KNOPPIX 3.7, GENTOO 4.3, XANDROS 201, and Simply MEPIS 4.4 but probably due to my CD-ROM sucking none will live boot except XANDROS, and it requires an HD install to run. I am still trying to save my data, but i am getting more discuraged by the minute. Anyway thats my lame story as sucky as it is.

    BTW I know it is off topic but could any of you LINUX people out there tell me wtf isolinux errors mean on live boot attempt? Specifically the one that says something about a very dammaged bios or something like that and "Trying to wing it" and then repeat. Sucks. Anyway my response to BILL would be I just finished TRYING to get rid of HUNDREDS (if not thousands) of malware files off my computer because XP is SOOOO secure. I think he needs to windows update his reality.
    DarthVain

    1. Re:HULK SMASH! by arkhan_jg · · Score: 1
      Isolinux is the CD-ROM bootloader that most linux distro's use. Basically, it tells the computer where to find the bootable OS (in a livecd's case, there's a mini install of linux on the CD)

      A number of computer BIOSes suck when trying to run this, as you've discovered.

      Following the advice here from isolinux's site...

      First, download the two binary dos files, sbminst.exe and cwsdpmi.exe from smart bootmanager download site.

      In a command prompt on windows xp (or dos prompt on an older version of windows), use cd (dir) to get to the directory you saved the file in. Type


      smbinst.exe -d 0


      with a clean, formatted floppy in the drive - which should install the smart boot manager to the floppy.

      Set your BIOS to boot from the floppy first if necessary, and you should then get the smart boot manager menu - one option of which is to boot the cdrom.

      The advantage of doing all this is that it bypasses your crappy computer BIOS, and uses the loader on the floppy instead to boot the CDROM.

      By using the bootmanager floppy to boot your knoppix CD, you should be able to boot knoppix, mount your windows drive, and copy all your files to another hard-drive or network share.

      --
      Remember kids, it's all fun and games until someone commits wholesale galactic genocide.
    2. Re:HULK SMASH! by DarthVain · · Score: 1

      Thanks, I will give that a try. Orginally I had though it may just be my CDROM, as it has trouble booting from it regardless (XP will not either). I had read in the documentation that you could make boot floppies from the CD itself and then boot via floppy, however if my BIOS is not compatible or whatever, then it won't work regardless I figure. Its a crappy 3 year old mid range DELL so its not too surprising.

    3. Re:HULK SMASH! by arkhan_jg · · Score: 1

      Technically, both isolinux and windows xp boot cd's use the el torito boot standard, as opposed to the older 2.88MB embedded floppy image method.

      Support for El torito is spotty on older motherboards, so I wouldn't be at all surprised if your BIOS doesn't support it properly. There are a variety of boot floppies that basically use their own el torito loader, rather than the BIOS one. Such a method should also help boot the XP cd for reinstalling.

      Smart Bootmanager is one I've used in the past with some success. It also has the advantage that if you want to use it more often in future, you can embed it in the hard drive MBR as your boot manager, and boot multiple OS, CD's etc via that without having to use a floppy all the time. You can do the same with a number of other hard drive bootmanagers too.

      Another possibility would be getting an upgraded BIOS from dell; but if you flash the wrong one you risk crippling your motherboard entirely, so I wouldn't recommend it unless you're certain the upgrade is the right one for your board!

      --
      Remember kids, it's all fun and games until someone commits wholesale galactic genocide.
  60. Re:Annoying by hachete · · Score: 2, Interesting

    >I can't give her a linux cd and expect the same results.

    This sounds like untested orthodoxy. Has anyone tried recently? I'd like to see someone set up an install race btn Linux (with a user-friendly linux distrib) & MS XP. The playing field would be as level as possible (something, btw, MS would never give you because they *own* the OEMs, that's why they're an illegal monopoly) and there would have to be independant judges. Say, two different *virgin* installer operators on different machines overseen by some worthy judges . It would be worth it - even if it failed - to see what happened.

    All we need is someone's g/f(s) - something which would be hard to come-by on slashdot - although you claim to have one, which makes me suspicious. Maybe someone could volunteer their parents, grand or o'wise?

    --
    Patriotism is a virtue of the vicious
  61. I wonder if he still programs? by super_carrot · · Score: 1

    With all the sales, hob knobing with state heads etc... I wonder if he still programs at all?

    --
    void sig(void){ */ STUB:**FIXME** /* }
  62. Paxman asked Howard 12 times! by JJSpreij · · Score: 1

    Moving slightly offtopic here, but Paxman asked Howard the question "Did you threaten to overrule him?" 12 times, according to Newsnight: Paxman versus Howard (includes the video!)

    In it, Jeremy asked Mr Howard the same question 12 times - not the widely believed 14 times. The interview was first broadcast on 13 May 1997

    --
    "These are my principles. If you don't like them, I have others." --Groucho Marx
    1. Re:Paxman asked Howard 12 times! by bananasfalklands · · Score: 1

      My apologies - having to ask the question 12 times proves Howard is Stupid.

      1. for turning up
      2. for thinking he'd get away with it.

      very very ot: Future PM I dont think so.

      --
      Send Peter Clifford Francis Macrae comdoms to 23 Bedford St, St.Neots, PE19 1AX, England
  63. Re:Good ideas implemented incorrectly. by Tim+Browse · · Score: 1
    How many Unix users could you say the same of?

    That's not fair - there's hardly any Unix users anyway! :)

  64. And The Operative Word Is... by Master+of+Transhuman · · Score: 1

    "Bill Gates PLOTS a Windows future"

    Lessee now, first I put a ton of money into some Senators' pockets...

    Then I get them to declare all the Linux freaks "Communists" and "enemy combatants" and get them all shipped to Gitmo...

    Then I accuse Larry Ellison of financing terrorist groups...

    Then I give a few million more dollars to some charity to make me above criticism...

    Then...

    Profit!!!

    --
    Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
  65. This Is Certainly True... by Master+of+Transhuman · · Score: 1

    "Certainly you can never underestimate the level of malicious people out there who are going to try to take advantage of whatever things there are."

    Unfortunately for him it applies to Gates...

    --
    Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
  66. Security is Number 1! by bitswapper · · Score: 1


    Haven't they been saying this for years? Since 2001 or so? How many thousands of viruses has microsoft's OS been nailed with since then?

    Palladium, anyone?

    Really, for a company whose software spreads viruses like a whore on a submarine for the last 20 years to claim that all of a sudden it thinks security is important at least implies that security wasen't number 1 until now...

    Boy that make me feel safe using windows! Thank God!

  67. Good point! by KZigurs · · Score: 1

    Aren't they?

  68. In Bizarro world MS is THE security company by gelfling · · Score: 1

    Seriously, someone needs to get Bill a hobby now that he doesn't run the company day to day and is only yhe Grand High Ayatollah of Software Architecture. There literally is not one single solitary word that comes from his mouth that I can accept at face value and whenever he mentions such and such aspect of computing that needs and deserves MS's attention I automatically translate that to "Fuck, Burn and Kill".

    And I am a Microsoft stockholder and wish them only the best - stockprice-wise. Let's face facts; Micosoft conquers by being average at best and benignly negligent at worst. This is a business not an artform and when they say something about security it can ONLY be interpreted in the context of what is good for Microsoft, not you.

  69. Re:HULK SMASH MORON! by ScytheBlade1 · · Score: 1

    Here's an idea.

    Learn how to use your OS before you ditch it.

    It's a two-way street. Really.

    First off, if your IE has the ability to do such things, you're a moron for letting it. Yes yes other /.'ers whine moan complain about bugs, but guess what? They happen. To the "best" of us. Double standards suck.

    Second, under the assumption that you actually knew what you were doing, let's say that you were hit with a really nasty bit of spyware/adware that owned your system as you have outlined. You claim that you're running 10-12 pieces of anti-virus software to remove spyware. First off, you're an ignorant moron, second you have no concept of backing up, less you wouldn't be "losing" all of your data.

    Yet the points STILL keep coming. "I have downloaded the latest versions of...GENTOO 4.3". Here's a hint, you're several releases behind. That's by far not the latest. So don't bother.

    Oh, and if you're getting those isolinux errors that you describe, you've already answered your own question...your computer hardware is owned, isolinux tries to work, but fails, because your computer is a piece of crap.

    Linux is not for you. Windows is not for you. Come back and whine when you have some room to speak about computing sucking all and being insecure. For now, it's clear that you're just a moron :)


    (Now there's a piece of flaimbait if I've ever written one...but hey, it felt good, all right?)

  70. Re: Microsoft Security... by l3v1 · · Score: 1

    Microsoft's message to both it's shareholders and it's customers is crystal-clear: Microsoft would rather BUY an anti-spyware company to "solve" it's Internet explorer problems, than spend the money to fix the problem with it's software.

    No, no. The message is: Microsoft will not solve such problems. Microsoft has enough money to buy up e.g. an anty-spyware company, and maybe this way the raise in publicity and the PR will make problems go away. You know: don't see it, doesn't exist.

    --
    I am putting myself to the fullest possible use, which is all I can think that any conscious entity can ever hope to do.
  71. Re:Linux users always crack me up by pandrijeczko · · Score: 1
    With all respect, Windows is sold as an easy operating system to use and maintain which is simply not the case.

    Sure, my 12-year-old niece can download and play MP3s in XP, do her homework in MSOffice, install software, etc. But does she update her virus checker, scan her system for spyware, apply regular software updates, etc. etc? Of course not...

    I don't doubt your Windows system has been trouble free but you've had to spend a lot of time and effort keeping it that way.

    Linux currently has the advantage that it's not targetted for spyware, worms and viruses and in reality, it probably never will be simply because it's very difficult (if not impossible) to find the same version of a single component that runs on most of the Linux machines that connect to the Internet. How can you exploit a vulnerability if only a very small number of people have that vulnerability on their systems?

    I'm not denying that Linux can be exploited through buffer overflow attacks on daemons and I probably spend as much time as you applying updates, configuring firewalls and trawling system logs on my Linux systems.

    But let's dispel this fantasy that any OS is "easy" - the real problem is that so many Joe Sickpacks have believed the MS hype of "easy Windows" which is why there is now such a huge population of poorly protected PCs out there to spread all manner of unwanted programs.

    --
    Gentoo Linux - another day, another USE flag.
  72. Re:Good ideas implemented incorrectly. by pandrijeczko · · Score: 1
    UNIX was never designed to be secure because when it was designed 30-odd years ago, there was no public Internet full stop.

    However, as time has gone on, the architecture of UNIX and UNIX-like systems has changed to compensate for the insecurity of the Internet - this is why most daemons on a UNIX system can now be run as non-root users and/or over layers like SSL to tighten things up considerably.

    Sure, it takes time and a heap of knowledge to get a UNIX system as secure as possible but when you run open protocols over the Internet, any exploits get fixed pretty quickly and there's absolutely no chance of an email attachment trashing a system, for example, because someone has found an exploit in a closed proprietary protocol or API that just about everyone uses.

    In the same vein, this UNIX-bashing, based on the UNIX that was 30 years ago, is also getting old.

    --
    Gentoo Linux - another day, another USE flag.
  73. Re:BBC Bill Gates Interview Part 2: Security by ajs318 · · Score: 3, Insightful

    Windows is hopelessly broken. The fact that a binary compiled against Windows 3.1 will work on Windows XP just goes to show that XP is laden down with unnecessary legacy support. It is not any kind of benefit. It is a bad thing, because those dregs of Windows 3.1 that persist into Windows XP are exactly why we have the malware problems we have. In the DOS days, programmers could afford to use techniques that relied on some heavy assumptions since falsified: that a machine would not be connected to a network, and that there were some operations that no user would ever have a legitimate need to perform. {Unix always was network-aware, and always gave its system admins more than enough rope to hang themselves and trip up anybody who came looking for bodies.} DOS, and Windows afterward, ended up being more tolerant of shoddy programming than proper "industrial" operating systems. In some cases, bad programming was actually encouraged by DOS/Windows design blunders. As desktop PC power overtook the first Unix mainframes, and Internet connectivity became the norm, the vectors were lining up for disaster.

    You do not need for systems to be backward compatible with ancient binaries. As long as you have the source code, you can simply re-compile it against your latest kernel and libraries, and it will Just Work. If something really has changed so much that it won't compile without editing, then it was already broken in the first place.

    Stable closed-source drivers running in or with a closed-source kernel will never exist. Perfection can only be achieved when the driver developer and the kernel developer each have access to the other's code. Anything less than the full, annotated source code is just incomplete documentation.

    Closed source is destroying computing. If everything is closed source, then it makes sense to build machines with the kind of processor and the I/O ports in the same addresses. Otherwise you need to supply different versions of essentially the same software just to work with different manufacturers' computers. {Think back to the cassette-based software on the 8-bit computers of the 1980s, and the racks in W.H.Smith full of similar games in versions for the Oric, the Spectrum, the Commodore 64, the BBC model B and the Amstrad CPC464. Come to think of it, why didn't they just record all the different versions on the same cassette one after another, for crying out loud?} All machines built the same way is one way to do it. It is not the only way. You can eliminate architecture-dependence by distributing the source code. Then, any architecture for which a suitable compiler exists can potentially run it.

    If there were more machine architectures -- by which I mean physically different instruction sets and/or port addressing schemas -- out there, then we would instantly reduce the susceptibility of the worldwide user base to viruses, worms and trojans. Call it electronic biodiversity. In an environment like that, software would pretty much have to be open source to survive; it would hardly be economically viable for a vendor to release many versions of the same software. You would obtain a package in source form, audit it if desired, compile it, then have to perform some deliberate hardware action {like pressing a small, recessed button; or moving a jumper on the motherboard} to allow it to be installed.

    Microsoft will get their comeuppance, though. Sooner or later they will have to launch a new version of Windows that will totally break compatibility with legacy software. Buyers will now have the choice: spend a lot of money buying the latest Windows system, not be able to use any of your old Windows software, have most of your old documents rendered totally unreadable and worry about the next time Microsoft pulls this kind of stunt; or spend not mu

    --
    Je fume. Tu fumes. Nous fûmes!
  74. Re:HULK SMASH MORON! by VAXGeek · · Score: 1

    I'm unsure which comment is the troll.

    --
    this sig limit is too small to put anything good h
  75. Not flamebait by andalay · · Score: 1

    This quote says it all:

    Stephen Cole:

    Are you a victim perhaps of your own success? Being the biggest, you are always going to be under attack.

    Bill Gates:

    And we're always able to do the best R&D, the best innovation, get the best partnerships.

    Certainly our position is one that people envy.

    Bill Gates, you rock! Even though you had a nice net to fall back upon, you worked hard so you deserve it but I sitll dont like windows.

  76. "Designed for XP" by WebCowboy · · Score: 2, Informative

    Actually, as an ISV, if you want to put the shiny "Designed for Windows XP" sticker on your application, you have to pass a few Microsoft-administered tests.

    Some criteria:
    [...]

    I've admittedly not looked very hard for the "designed for XP" logo, but that might explain why getting 3rd party software which truly meets that designation is still nearly like finding hen's teeth.

    1) Isn't as large a problem as it used to be, but a good amount of software (especially "free as in beer" stuff you get on the 'net that is crappily written) still peppers C:/WINDOWS/SYSTEM32 with DLLs

    2) I don't know a single, solitary person who has never had to run with elevated privliges for at least one application that is still currently distributed and advertised to work with XP (although the official logo probably isn't displayed). One of the worst offenders besides games is DVDs.

    3) Half the stuff out there that runs as a service/resides in the system tray falls apart with fast-user switching.

    4) That one makes me laugh...uninstalls are cleaner but registry residue is still a problem. The whole concept of a monolithic, binary file is absolutely stupid. Honestly, what was wrong with .ini text files? If MS wanted maintainability then why didn't they specify a standard way of handling them in WinNT and Win95 (file locations, syntax, etc) as a condition of meeting the "logo requirements"?

    Mr. Gates can talk all he wants about the wonderful plans he has for software, but it seems not even he can overcome the incredible resistive inertial forces that have built up around the Microsoft platform. XP has been out for YEARS and all the above-mentioned problems are STILL common. Longhorn could be completely rewritten from the ground up with a completely solid architecture (which would be great!) but the problems won't go away--not for a long time. I figure that even if the foundation for Longhorn were as solid as it is for BSD, Linux and OS X the world could be contending with legacy flaws and quirks until about 2010 (just a wild guess---not gonna eat my words 5 years from now).

  77. Doesn't he mean "overestimate?" by Spaceman40 · · Score: 2, Insightful

    "Certainly you can never underestimate the level of malicious people out there who are going to try to take advantage of whatever things there are." - Mr. Gates

    If you can "never underestimate" said level, it drops to zero... I think he means that you can never OVERESTIMATE the level - which means that no matter how many people you think will try to break your stuff, there will always be a couple more, or their skill will always be a little greater.

    If he honestly thinks that the level of malicious crackers in the world is so low as to be unable to underestimate it, he shouldn't be in the computing business (yes, yes, I know - he shouldn't be in it at all, but whatever).

    If he means level like "stoop to their level"-type level, well, perhaps, but you don't have to be "evil" to be good at breaking things...

    --
    I [may] disapprove of what you say, but I will defend to the death your right to say it.
  78. MOD PARENT UP! by carou · · Score: 1

    Excellent point, why has no-one else noticed this?

    How come people can say exactly the opposite of what they mean; and their audience not only understand what is really meant but don't even notice the difference! Oh well, I could care less.

    1. Re:MOD PARENT UP! by gfim · · Score: 1

      Woosh!

      --
      Graham
  79. Re:HULK SMASH MORON! by DarthVain · · Score: 1

    Ok your calling me a moron? I am an idiot to let IE get taken over? It is my responsibility to defend IE? Give me a break... Yes I know I can disable features so that it can't happen. However I am not about to cripple myself so that I can browse. What I was saying is that it should be made so these things cannot happen.

    Number 2 I was trying to be brief and as you may have noticed it was still too long a post. I have various Spyware and adware program running, and well as firewall software, etc.. AND anti-virus software. I figured any intelligent reader would get the idea that I was trying to fix my system which was the post, not a line by line outline of how I tried doing it and specifically what software I used you flipping moron. Also feel free to tell me how I can back up 260GB of data please. Can I do that to CD or please, give me a break. You have to risk manage. Am I going to buy another computer so I can have duplicate systems? No! Be reasonable. Have more disks to be infected on the same computer? Tape drive?? Yeah I got that money to spend too...

    Number 3 actually the version I am using is "install-x86-universal-2004.3-r1" which to my limited knowlege (admittedly) IS the lastest you can get. It is my LIMITED understaning that you can download updates via the Portage feature. However you moron it is a bit hard to do if you do not have a running copy. Anyone feel free to correct me on any of this, as I ONLY have a limited understanding.

    Number 4 Yes you get one point, my computer is a POS... if I had a choice I would love to get a new one, but $$$ dictates otherwise. What I wanted was perhaps some help like perhaps flashing to a new BIOS may help, or trying a friends newer DVD drive. You being a jerk and mouthing off doen't help me at all.

    So your saying LINUX isn't for me nor is Windows? Hmm well I seem left with very little alternative... What FreeBSD? I am not sure why you decided to be such a jerk but whatever, if it makes you feel superior, then have fun, I certainly can't stop you.

    I could try and say how many years I have working with computers and various OS's, or pehaps how I work in the industry on an enterprise level, or how many degrees I have in the field... but we all know two things, that I can say whatever and you won't belive it and vice versa and that you are a certainly a jerk.

  80. please no more bashing by shis-ka-bob · · Score: 1

    I prefer kshing and zshing to bashing when it comes to Unix.

    --
    Think global, act loco
  81. Re:BBC Bill Gates Interview Part 2: Security by Foolhardy · · Score: 2, Insightful

    You know, the Linux executable file format and syscall interface have been stable enough since version 1.0 that you can still run binaries for Linux 1.0 in 2.6.

    Win 3.1 and DOS compatibility is provided by a VM with its own libraries and code. NTVDM is just a program that provides the legacy interfaces; other than the special controls for putting the CPU into V86 mode, the environment has exactly the same privileges as any other application. You can remove NTVDM at your leisure, therby breaking any compatibility and removing all the old code. NT doesn't have any code from DOS, Win3.1 or 9x in the underlying OS. NTVDM for DOS/Win3.1 on NT is like Carbon for MacOS 9 on OSX.
    The 64 bit CPUs that NT supports don't have a V86 mode anymore; NTVDM isn't supported, so DOS/Win3.1 compatibility is broken.

  82. Re:Annoying by srjames · · Score: 1

    Well you do have to understand that I wouldn't dare hand her any Linux CD sans Slackware. But that's just because I have a personal bias to it. :)

  83. Aren't you forgetting Something? by TheWama · · Score: 1

    I just read an *entire* Slashdot thread about Windows OS security and didn't read a single mention of OS X!!!

    IMO the Windows OS vs. Linux OS paradigm ("simple" vs. secure) lost all meaning about 2 years ago...

    I'm writing this on a PC, but darn, the more I read the words of Gates and Balmer, the more depressing it is to know that I've been paying to make these guys rich for most of my life, and for a crappy product at that. Meanwhile, I see Apple come out with great new stuff, such as the upcoming Tiger.

    And unlike Microsoft, Apple is led by a man I have no desire to shoot.

    My next comp will most definately be a Mac.

  84. Re:HULK SMASH MORON! by ScytheBlade1 · · Score: 1

    If anything, I'd say his is a troll, and mine is flamebait. :)

  85. Re:HULK SMASH MORON! by ScytheBlade1 · · Score: 1

    1) Required bash.org quote
    2) Running various adware/spyware programs... firewall, anti-virus... you sound like a classic Dell user to me. I can safely and honestly say that in the 6 years of running Windows 2000/XP, without a firewall, antivirus, spyware/adware scanner, and with IE actually not locked down at all, over the period of 6 years, I obtained exactly 0 viruses, 0 adware/spyware programs, oh and 0 reasons to install a firewall besides my NAT router. I kid you not. Go ahead and hit me with the "but there's stuff running that you don't know about", I don't care, really. I know what my system is running. I know what I need to in order to effectively manage a windows computer.
    3) The next gentoo release will be soon, and it will be 2005.0, however you are correct that 2004.3-r1 is the latest. However, saying that you downloaded 4.3 is simply screwed up, as that's the version numbering scheme used previously. A version that didn't exist, too.
    4) External hard drive. Local friend. Compression. There's ways, you just have to think outside your box there. (One BIG STARING YOU RIGHT IN THE FACE YET YOU'RE A LITTLE BLIND TO SEE IT: TEH INTERWEB!)
    5) At the recommendation of a friend, I've found the *perfect* OS for you. Windows 3.1.

    "I could try and say how many years I have working with computers and various OS's, or pehaps how I work in the industry on an enterprise level, or how many degrees I have in the field... but we all know two things, that I can say whatever and you won't belive it and vice versa and that you are a certainly a jerk."
    Well. That explains the current state of a lot of the industry.

    Holy crap, I know why trolls do it now. It's rather entertaining.

  86. Re:Security? Ha! Ha? by Your+Average+Joe · · Score: 1

    Why don't we see more exploits for Mac OS X? It allows my grandma to use a computer...

    --
    Your Average Joe
  87. Re:Annoying by colinrichardday · · Score: 1

    Roughly 1 gram per cubic centimeter?

  88. Re:Annoying by drsmithy · · Score: 1
    And the answer on two continents is no

    Note that on at least one of those continents (I'm not familiar with the details of the EU antitrust case) that answer came by not even considering a company considered by most to be a competitor and alternative (Apple) to be part of the same market.

  89. Already happened..... by nodnoL · · Score: 1

    Gates has already been interviewed, with much hype beforehand, by Paxman. Unfortunately Paxmans approach was poor and Bill played him expertly.
    http://www.theregister.co.uk/1999/10/18/gates_knoc ks_stuffing_out

  90. Thanks by Pan+T.+Hose · · Score: 1

    Can't we organize a Slashdot interview of BG?

    Do you _really_ wish to see a virtual bukkake?

    Thanks a lot. I almost forgot this picture.

    --
    Sincerely,
    Pan Tarhei Hosé, PhD.
    "Homo sum et cogito ergo odi profanum vulgus et libido."
  91. Impressive by Pan+T.+Hose · · Score: 1

    I remember one show where they were discussing distributed computing, and had a cluster of Windows 9x boxes (!) all of which duly blue-screened.

    All of them? Simultaneously? With O(n) performance? Wow. Impressive.

    --
    Sincerely,
    Pan Tarhei Hosé, PhD.
    "Homo sum et cogito ergo odi profanum vulgus et libido."
  92. wmv? by torrents · · Score: 1

    real media and no wmv? heads are gonna roll!!!

    --
    Get your torrents...
  93. Re:Annoying by hachete · · Score: 1

    why is this -1? This could do with a lot more exposure. Comments like those of the grandparent could be rebutted.

    --
    Patriotism is a virtue of the vicious