Slashdot Mirror
Vista Security The 'Longest Suicide Note in History'?
rar42 writes "The Inquirer is reporting on an analysis of Vista by Peter Gutmann — a medical imaging specialist. This isn't the usual anti-Microsoft story — just a professional looking at what is going to happen to his computer if it is upgraded to Microsoft Vista. From the article: 'Windows Vista includes an extensive reworking of core OS elements in order to provide content protection for so-called "premium content", typically HD data from Blu-Ray and HD-DVD sources. Providing this protection incurs considerable costs in terms of system performance, system stability, technical support overhead, and hardware and software cost,' says Gutmann."
You know this is a problem when dealing with Microsoft. You come into the process as objective person without prejudice to them and then you study the subject. If you study in a sufficient detail, you will become so enraged by what they are doing and that you are now hopelessly prejudiced against Microsoft. Look at the judge Jackson in the Microsoft trial. That is a person who's living depends on being objective and he got so pissed off by studying Microsoft practices that even he was not able to keep being perceived as impartial and so his ruling got thrown out by court of higher instance.
The most sad part is that Microsoft is abusing this by pointing to every such study as prejudiced and often rightly so. But what is the general public to do now? You either have experts that study the matter and become prejudiced or you have those with only superficial knowledge who can keep the illusion of objectivity but more often than not they do not know enough about the matter. Often to the point to believe studies paid by Microsoft as being a source of objective information. And if you want to keep the illusion of objectivity you need to cite those and it just seems wrong to me.
Sometimes you are just not supposed to be objective. Some topics do not invite that form of discussion. Is the Earth flat? I don't think anybody expects you to present the supporting opinion in equal length. Did holocaust happen? Again, not really a question in need of giving equal space to both sides. So why 'Is Microsoft crooked and do they intentionally cripple their product to harm consumer and competition?' needs any more discussion even after it was affirmed by Findings of Fact published by a federal judge? The matter of do they or don't they has long been settled. At this point the only question should be: "How exactly are they trying to cheat this time?"
If programs would be read like poetry, most programmers would be Vogons.
Here's an interesting tidbit from the WINE folks:
Direct3D10, which will ship with Windows Vista in a few months, doesn't seem to be a large cause for concern. At first glance it appears to be more of an evolutionary change rather than revolutionary. New shader support will be needed, but extending ours once OpenGL supports it should be pretty easy. Stefan mentioned Microsoft is currently offering a lot of incentives for Windows developers who develop D3D10-only games since they'll only be usable on Vista - there's no plan to backport D3D10 to XP. Dan Kegel asked if that means we should port Wine's forthcoming D3D10 implementation to Windows, which would be relatively easy when we switch to WGL.
Many industrial and medical applications run on Windows. You forget that Windows NT was advertised as a high-security C3 operating system. Many applications were ported on this advertising. Some of the lock-down permissions in Windows NT were pretty draconian, and worked really well.
With Windows Vista, Microsoft appears to be completely abandoning any pretense of high-reliability.
Many industrial and medical applications have fairly high reliability requirements. Using commodity software and hardware has some cost and reliability advantages. It is easy to source replacement parts, and implement hardware redundancy. Being able to easily obtain replacement hardware is a big advantage if downtime costs are large.
The problem is that Microsoft appears to have abandoned the high-reliability sector. Windows XP has a continuous stream of rolling updates for both XP and the Anti-Virus packages. The result is that your high-reliability application can stop working for no apparent reason. From all indications, Windows Vista will make this worse.
Recently, I have been looking harder and harder at Linux. Linux offers a much more stable platform, and I can customize the installation to make it much more difficult to corrupt. The issue is that such a high software investment has been placed in specialized Windows solutions, that it is difficult to port everything to another operating system overnight.
Look at linux... its not like we have Linux 3.0 and Linux 4.0 where nothing old works.
Its still linux. 8 year old stuff still compiles mostly, its fluid.
If windows was so great, it would stay at one version XP forever, with unlimited updates forever, SP4 SP21. etc...
Just because they are forced by marketing to make a new version is admiting its core is crap and needs a rewrite.
They could just as easily update/replace portions of XP gradually, six monthly. And make sure each other component isnt
too tied to others. ie WMP shouldnt need IE7 or something else... it should be detect and use if available.
This whole idea of , lets stop current dev and all new dev is placed into a new 'version' edition is total marketing crap, and
old school stuff of the 80s. Modern complex systems should never have a major rebuild, its always small step updates, like real
biological evolution.
OSX is basically the same, but again its articially versionized because of just new components added, and the silly side effects like
newly compiled made software not working on old OSX's even if they use no new features, thats my biggest pet pieve of OSX. Sometimes
its only the result of the installer package, not the code it self which would work fine. If X library is less than version Y, then dont use
those features.
Btw does apple make the old OS10.1 and 10.2 upgrades from 10.0 FREE NOW? what about any one left in 10.2 land, do they get a free 10.3 upgrade
once 10.4 is widely installed? Having too many versions installed out there should be a worry for them, they should allow all 10.3 machines to upgrade
for free. It would surely be cheaper to have no support for pre 10.3 if you provide free upgrades.
Liberty freedom are no1, not dicks in suits.
It is quite difficult to work in industries were Windows Vista might be used, and not wind up with a pretty mean-spirited anti-Microsoft argument. Typically the train of reasoning goes like this:
1. Power plant uses Windows PC's to monitor "x".
2. If "x" can't be monitored, we shut the power plant down. This is "fail-safe".
3. If enough power plants shut down, then we have to shut down the power grid. Shutting down the power grid affects the entire east-coast. When the power grid is shut-down, we automatically shut down all power plants. This is a fail-safe response. After the power grid is shutdown, it takes a few days to restart things.
4. If we shut down the grid, then several people will die (via indirect sequences of events). At a minimum, many people will be placed in high-risk situations, and large numbers will be inconvenienced.
What would it take to shutdown a network of identical Windows PC's making up a power system? A piece of malware, a rogue anti-virus update, etc. It really wouldn't take all that much to wipe out the power grid for the east coast. A series of inept coincidences could potentially succeed.
As a Professional Engineer, a person who is supposed to be able to advise companies on this stuff, it is extremely difficult to avoid sounding excessively alarmist. I work on industrial applications that are supposed to be fairly high-reliability. It is very difficult to keep Windows PCs isolated from the outside world. If you don't isolate the PC's, then you are vulnerable to Windows service-packs and Windows Anti-Virus software shutting down your production line. How do you even explain the problem to people? Everyone uses a Windows PC, and a Windows PC could never hurt them, right?
What do I recommend? I don't know the answer. Mostly, I try not to think about it too much. With the large amounts of specialized Windows software, it is difficult to think of any easy fixes.
http://www.microsoft.com/about/legal/useterms/defa ult.aspx
this is a microsoft hosted page that you can pull up any EULA you want (MS products only of course)
Microsoft requires the right to DISABLE YOUR COMPUTER if it fails a validation check (WGA BOFH style anyone?)
Any person using FTFY or editing my postings agrees to a US$50.00 charge
I currently have a Chinese-made upconverting DVD player. Chinese made because the US and Japanese manufacturers have knuckled under to the demands of the entertainment industry that no DVD player will output HD content over component video cables. (Now think for a moment just how mind-numbingly stupid this restriction is. Upconverting DVD players don't actually output video in true HD, because the movie isn't on the DVD in HD in the first place, and no process can add more information that was there to begin with. All an upconverting DVD player does is interpolate. An upconverted signal is the absolute last thing that any pirate could want, because it massively increases the amount of data required to copy the signal, without adding any information. So the entertainment industry, out of sheer ignorance has added a completely useless restriction that imposes considerable inconvenience on the consumer. Many older HD TV's only have component inputs, and even newer ones typically have only one HDMI or DVI input. And HDMI/DVI switchboxes are much more expensive than component ones. So consumers end up switching cables, shelling out extra money for switchboxes--or doing what I did, and buying a Chinese DVD player that is oriented toward the consumer instead of sucking up to the content industry.
The message is clear. They believe their monopoly can be best maintained by catering to producers, rather than to consumers. Consumer choice is not driving that market.
And it's going to hurt them. probably long term and big time.
Zune is a failure vs Ipod because consumers don't want to deal with DRM everytime they want to listen to something, especially when there are hundreds if not thousands of music players that will play non DRM files. Including the Ipod.
Vista will fail for similar reasons. Business is happy with XP and will support it until Microsoft doesn't, and maybe adopt Linux after that. Consumers will only upgrade when they buy a new PC, and will stay around even after support is killed. if Apple starts opening their mouth about vista DRM screwing their music experience, they might just buy a Mac next time. Hell I don't know why Apple hasn't done a "Buy a Mac and get an Ipod Free" deal as of yet. It would definitely get a mac in the door faster.
It's looking the same way for office2007 business wise. I know we look at it and say to ourselves "training nightmare". I'm sure we're not the only ones saying that especially since our business is Higher education. I can only imagine what a commercial business is saying.
Apple and Microsoft had the power. They had the power to give both AA's the finger and work directly with the artists. They had the power to ignore them completely and let the users rip until the cows come home. They had the power to screw these Hi-def DVD formats until they relaxed the standards to work with existing hardware and software. Unfortunately, Apple seems to be giving the RIAA the finger while somewhat bowing down to the MPAA's HD lockdown Schemes, and MS is asking both AA's which lower cheek to kiss in a futile attempt to gain some more exclusive content that Apple's going to get anyway because their the market leader. Even then, all MS is really going to get in the end is more demands from the AA's when they could have easily just stayed the course they were going and force the AA's to conform to the digital age or die.
If there is any time for Apple and Linux to start pushing themselves, now's the time.
In Soviet Russia, Trojan exploits YOU!