Microsoft's Security Meeting Causes Unease
Tony Maclennan writes to tell us that there were many mixed feelings at this year's Microsoft Security Response and Safety Summit. Many who attended the conference felt that the presentations were sadly lacking in the technical details that were shared in previous years. With Microsoft entering the arena as a competitor to these anti-virus companies, one has to wonder about the effect on the free flow of information that ultimately benefits the consumer.
Has anyone in the DOJ looked into this Microsoft anti-spyware anti-virus bit?
Anyone else feel this is the epitomy of anti-competative practices? Hell their OS is the REASON these other companies exist, and now Microsoft gets to profit from thier own security holes?
Someone else HAS to see the flaw in this idea... I can only pray the EU once again has more sense than the DOJ.
So you're stuck with our crummy OS. Want to buy some protection?
Microsoft would be irresponsible if they did not include a clause in the agreement giving them rights to use anything disclosed at the conference.
Imagine Microsoft was busy working on feature X. Then, along comes someone from Symantec who talks about feature X at the conference. Later, Microsoft comes out with an update to their product incorporating feature X. Symantec cries fowl and starts complaining about how Microsoft stole their confidential information.
All the clause effectively says is that the information disclosed at the conference is not confidential. If it's not a trade secret, Microsoft can use it as it sees fit anyway. The same would hold true for anyone else at the conference. The agreement just puts it down in plain English for those not up on IP law.
I sat in a meeting yesterday with "developers" who had never heard of Bachus-Naur form. I routinely confer with "programmers" who have never heard of a finite state machine. I work daily with "data architects" who have never heard of Dr. Codd or of normalization. I am personally acquainted with upper managers who are just dying to replace OpenBSD-based firewalls with M$ Vista Server. THIS, my fellow cognoscenti, is the extent to which our society is infested with charlatans and ignorami. That M$ can now, on the one hand, generate security holes of arbitrary obscurity, and, on the other, miraculously detect and repair them far and away better than their erstwhile "competitors" is a final and apocalyptic testimonial to the supreme stupidity (I use the word advisedly, in the sense of "willful ignorance") of our omnipotent layers of corporate management. Wasn't it bad enough when M$ were the sole possessors of the Most Sacred A[PB]Is? Wasn't it awful enough that they were able to ignore even the most rudimentary dictates of software engineering with impugnity -- that the drooling imbeciles in management would keep right on paying vast sums of money for hideous deformities of Logic without batting an eyelash? Do they now get to rake in huge profits from "repairing" systemic defects of their own intentional manufacture? I am 41. I am tired and old. I have watched, like a Felliniesque "Sad Clown of Life," wave upon wave of utter inanity wash up on the vast, dead-whale-stinking beach of corporate and academic IT. I have seen too much. I can cry no more. I want to know how to stop caring now. How, for the love of God, do I join the endless ranks of these gibbering fools who never think one picometer beyond their golf handicaps? How, for the bleeding love of the pumping, pulsating heart of Jesus Christ on a pogo stick do I just sit in meetings daydreaming about jumping into my big yellow H2 and driving back to my prefab McMansion in the burb-sprawl and staining my redwood deck with Johnson's WaterSeal? Why oh why must I KNOW that the imminent deaths of such elegancies as Tru64 Unix and MIPS and Alpha are a sin against art and science and technology and Man? Can't I just be stupid too? What's so wrong with me? What have I done? Why must I suffer so? One day, my friends, we will all lounge in paradise happily signing off on million-dollar purchases of Microsoft AntiVirus Protection(TM) with huge idiotic grins upon our faces and lovely oblivious strings of rancid drool dangling from our chins. We will not be tormented by the Knowledge of Good and Evil. Our eyes will bear the brilliant, unfocused glow of perfect, orgasmic stupidity. Until then, we must work to balance our egregious karma. Can there be any doubt whatever that we fried and devoured living human babies in each of our wretched previous incarnations? What more glaring evidence can there be of our complete, total, and inherent evil? We sinners must needs endure the terrible, sadistic wrath of a cold and childish god. May he soon tire of so gleefully tormenting us. Amen. Railgun Sally
MS were quite clever to get DOJ all hot under the collar about Netscape & IE. These are no longer competitive areas. What is more important is that DOJ monitors future manuipulations by MS. For example, how they are playing in mobile space, how they're playing in personal audio (will their new audio device kill iPod through fair means or foul?) and things like anti-virus products.
For MS's point of view, being able to lock up the anti-virus APIs makes more than just business sense. It also allows them to shut the door on (limited) review of their system by citing some lame excuses like "there is no valid reason for anyone to look at these interfaces, anywone doing so is probably a terrorist!". Loss of that (limited) review would be a bad thing for the industry.
Engineering is the art of compromise.
If they were smart enough to know the flaws, why not just fix them?
Professional Politicians are not the solution, they ARE the problem.
Offering someone protection for a fee when you're part of the danger to that person means that you're running a protection racket. For a fee, MS offers to close the holes which it leaves in its operating system. I think that you see this kind of scheme at work all over the computer industry. The pushing of upgrades of software and hardware as a fix against problems is of a similar nature.