Slashdot Mirror


Microsoft Says "War on Terror" is Overblown

SlinkySausage writes "The endless security measures imposed on society as a result of the "war on terror" have become overblown and intrusive, according to Microsoft Redmond senior security analyst Steve Riley. He made the comments in a talk at day one of Tech.Ed Australia about software security. Riley also fessed up that Microsoft cocked up XP from a security perspective. "We let you down with XP," he said. Microsoft also showed a very interesting new desktop virtualisation technology called SoftGrid, which allows applications to be virtualised individually, rather than a whole OS. Think Virtual PC or VMware, but instead of virtualising an OS, just a single application is virtualised."

29 of 666 comments (clear)

  1. Karma gets even with MS! by ArcherB · · Score: 5, Funny
    I'm kinda glad that MS gets to feel the pain of "overblown and intrusive" security. Maybe they will understand that it is better to make things secure from the beginning, rather than overacting after the fact.
    From TFA:

    Steve's approach to security spans all horizons, not just information technology. He elaborated on this theory in an afternoon session today at Microsoft Tech.Ed entitled "Making the Tradeoff: Be Secure or Get Work Done". You are trying to get work done. Allow or Deny?
    --
    There is no "I disagree" mod for a reason. Flamebait, Troll, and Overrated are not substitutes.
    1. Re:Karma gets even with MS! by Anonymous Coward · · Score: 5, Insightful
      From TFA:

      "It's measured against the current cost of leaving things as they are - if a couple of machines go down every week because of security vulnerabilities, that is a cost which can be measured and taken into consideration. However, if the cost is actually less than the cost of removing the problem , bizarre as it may sound, it might not actually be worth it."

      Hmmmm.... Maybe Microsoft really does understand why I refuse to intsall Vista on my network.

    2. Re:Karma gets even with MS! by radl33t · · Score: 5, Insightful

      Since when did failure become a path to success?

      Ever since scientific thinking birthed our enlightenment.

    3. Re:Karma gets even with MS! by cmacb · · Score: 4, Insightful

      Not to mention...

      As Microsoft always does, now that the NEW version is out, they have suddenly become aware and willing to talk openly about how miserable a failure the OLD version was.

      Microsoft continues to go to the bank on the basis of "You CAN fool MOST of the people ALL of the time."

      How much longer will this formula work for them?

    4. Re:Karma gets even with MS! by nugneant · · Score: 4, Insightful

      Ten years ago, this would be a really exciting development. Too bad that now, when MS talks about "security", they mean "DRM"... I don't care if I was "let down" with XP, I'm sticking with it into the forseeable future, because at least I know that XP isn't wasting CPU cycles to cripple my content on my computer.

      Fuck Vista.

    5. Re:Karma gets even with MS! by EdBear69 · · Score: 5, Insightful

      As Microsoft always does, now that the NEW version is out, they have suddenly become aware and willing to talk openly about how miserable a failure the OLD version was. This is Vista marketing at its finest. And in the fine tradition of Microsoft Marketing, it's a FUD attack against the product with the largest market share, in this case WinXP. Never mind that the product in question is put out by the same company.
      --
      I'm not an actor, but I play one on TV...
  2. Our way of life is not under threat! by Ckwop · · Score: 5, Insightful

    In the United Kingdom we lost fifty or so people in the carnage of bombings last-year, in the United States you lost four or so thousand.

    I don't for a second want to say that the loss of these lives through an unspeakable act of senseless violence is a trivial matter, but we need to put these figures in perspective. In the United Kingdom, more are killed in road traffic accidents in a couple of weeks than were in the July 7th bombings. In the United States roughly three times as many people are killed in gun accidents per year than 9/11.

    Somebody even said to me that more people were killed putting their socks on in the United Kingdom than by terrorists last-year. It's probably true. This stuff is right in the noise level of the threats we encounter each day. It's dramatic when we see some idiots attempt to blow a car up at Glasgow airport but in terms of actual risk, these people are up there with being struck by lightning or having a bad reaction to asprin.

    So why is there talk about trading liberty for security? Even though the security vs liberty argument is as flawed as the mythical man month, the point still remains - why do I need this extra security anyway? It's expensive, it costs me my rights and it's ineffective.

    It feels like that we've forgotten what it is really like to be a nation threatend with annihilation. In the 1940s our country nearly didn't make it and we have the United States to thank for that as much as our own heroic airmen. That was a time where the agressors really could have destroyed our way of life. Yet we did not yield in the face our adversity. We held our resolve!

    And we should hold our resolve now. In comparison to the Nazis these modern day terrorists are like flies trying to stare down a tank. I don't know whether to laugh or cry why we even take them so seriously. We should not give a shred of our liberty to these people - they are pathetic and worthless; you only need to look at the Glasgow "terrorist" attack to see this for yourselves.

    Simon

    1. Re:Our way of life is not under threat! by rossifer · · Score: 4, Informative

      In the United States roughly three times as many people are killed in gun accidents per year than 9/11.
      Not to disagree with your overall argument, but this statistic is wrong. Three times 9/11 would be about 9000 accidental firearm deaths per year. According to the CDC, there are actually about 750 accidental deaths attributed to guns each year in the US (CDC Mortality Statistics - select "after 1999", then "intent -> unintentional" and "cause -> firearm"). Which is about 25% of 9/11.

      I would suggest using automobile accidents in the US as well, since it only takes about three-four weeks of US automobile fatalities (~45,000/year) to equal one 9/11.

      So why is there talk about trading liberty for security? Even though the security vs liberty argument is as flawed as the mythical man month, the point still remains - why do I need this extra security anyway? It's expensive, it costs me my rights and it's ineffective.
      Hear! Hear!

      Regards,
      Ross
    2. Re:Our way of life is not under threat! by Xehn · · Score: 4, Informative

      I saw a chart on digg a while back that your comment reminded me of. Here is the link. It isn't 100% accurate, but it does a great job of illustrating the point.

      http://stpeteforpeace.org/real.threat.html

      I just wish people would listen to reason when it comes to all of this.

    3. Re:Our way of life is not under threat! by Kjella · · Score: 4, Insightful

      Our way of life is not under threat!

      I agree it's not under threat by terrorism. But, there are several issues that should be of concern which have far greater support among muslims, including but not limited to:

      * Freedom of speech
      * Women's rights
      * Homophobia
      * Religious law
      * Forced marriage
      * Repressed view of nudity and sexuality
      * Female sex mutilation
      * Honor killings

      I know some of these are not tied directly to islam, but they occur mainly in islamic communities and islamic leaders are not doing enough to stop, or are even encouraging these practises. In general, I have the impression that many muslims are far more intolerant towards our way of life and hold values which I quite frankly find unacceptable. I'm not pretending Europe has had too many of these notions too long, 100 years ago women couldn't vote, 50 years ago people were being put on trial for erotic novels and 35 years ago being gay was a crime here in Norway. But in my opinion we have made great strides in recent years ensuring equality for all and that everyone is free to pursue their own happiness. The muslims are on the whole a very reactionary group that in my opinion is threatening to undo much of the progress we have made. What bugs me the most is the complete lack of symmetry - if we go to Saudi Arabia, they want us to respect their culture (or face Sharia). If they come here, respect for our culuture is slim to none.

      --
      Live today, because you never know what tomorrow brings
  3. Let you down with XP by chatgris · · Score: 5, Insightful

    They say this now, when there is Vista to buy. It's just part of Microsofts standard strategy... Release new operating system, try and make the old one look bad.

    --
    Open Your Mind. Open Your Source.
  4. Re:Virtualizing Applications by TheRaven64 · · Score: 5, Insightful

    Or think 'operating system.' That's what an operating system does. It virtualises the computer's resources and multiplexes them for applications. It multiplexes memory and gives each process its own address space. It multiplexes disk and gives each process its own virtual disks (files). It (or a userspace delegate) multiplexes video and gives each process its own virtual screen (a window or virtual terminal). It multiplexes the speakers and gives each application its own sound device (a virtual channel). It multiplexes input devices and switches them between apps.

    Everything old is new again.

    --
    I am TheRaven on Soylent News
  5. Ironic by ArcadeX · · Score: 4, Funny

    I'd rather deal with airport security than install programs on my girlfriend's vista laptop...

    --
    An I.T. motto in the hands of an idiot is a dangerous thing...
  6. SoftGrid isn't new by Anonymous Coward · · Score: 4, Informative

    SoftGrid isn't new, nor is it a particularly close relative of WINE as some Linux enthusiasts suggest. It was a Microsoft acquisition, the former product name being Softricity. It's not just virtualization, it's packaging, so a single file, streamed from a server as needed, encompasses the program and all of its settings, creating a layer over the regular file system, registry, etc. with copy on write functionality; if the program tries to change the host OS in any way, it just adds to the shell of program specific settings within the single packaging file. Extremely handy for network admins who need to distribute programs, and want the performance of local apps (once the whole package is streamed, it runs locally, with the streaming order prioritized based on what the user is doing), but want the simplified administration of centralized programs with standardized configuration.

  7. Choose "cry". by khasim · · Score: 5, Insightful

    I don't know whether to laugh or cry why we even take them so seriously.

    Consider what we COULD be doing with the money spent on this.

    The Cold War ended. The world was as close to Peace as it has ever been. We could have been investing in so many things to help the human race as a whole.

    Instead we're spending trillions of dollars "fighting" a few thousand nutcases who can't do any more damage to the world than we do to ourselves, every year, in traffic accidents.
    1. Re:Choose "cry". by Xtravar · · Score: 5, Insightful

      The Cold War ended. The world was as close to Peace as it has ever been. We could have been investing in so many things to help the human race as a whole. Hey man, the defense industry needs to eat, too! What, you expect them to go out of business in times of peace?

      And this is the problem with militarily-funded businesses. They have incentive to not have peace.
      --
      Buckle your ROFL belt, we're in for some LOLs.
    2. Re:Choose "cry". by MightyMartian · · Score: 5, Insightful

      The worst part about all of this is the lack of recognition that other parts of the world have been suffering under this very same breed of Jihadist for a lot longer than the US. Both China and Russia have been dealing with this religious nutcases for years prior to 9-11. Heck, part of the reason they're so widespread in the Muslim world is because Saudi Arabia has been exporting its maniacs so that they cease to be its problem.

      The West now only concerns itself because suddenly we're the direct targets of their actions. Those actions are wildly successful because they're so visible. The fact that automobile accidents are far more deadly, or that more people die due to choking than the terrorists could ever hope to kill is besides the point. Those aren't sexy, top-of-the-hour, bonechilling, fingernail-biting, paranoia-inducing stories.

      I have pointed out to people who think that Jihadists are getting ready to blow up their supermarket that the people of Leningrad and London put up with attacks of such intensity, such lethal effectiveness and such destruction that it makes a hole in the Pentagon and two downed office towers look like a joke.

      --
      The world's burning. Moped Jesus spotted on I50. Details at 11.
    3. Re:Choose "cry". by Entropius · · Score: 5, Insightful

      Grandparent wasn't saying that the world would have been at absolute peace without the US invading Iraq.

      But the world was doing pretty well -- sure, the Middle East was trying to kill itself, but it's *always* doing that. The people with the *serious* militaries, however, were at peace. We had a golden opportunity to *not* spend our national wealth on the military; for the first time there were really no serious military threats to Western democracy. We could have done something useful... ... and instead, we go start a dumbshit war that's wasted more American blood and money.

    4. Re:Choose "cry". by wild_berry · · Score: 4, Insightful

      Peace was not disrupted by the United States

      But the intervention across the globe by Western governments since the end of WWII is that disruption of peace which makes enemies of those we and our governments have screwed over.

  8. What's the big security problem with XP? by xxxJonBoyxxx · · Score: 4, Interesting

    Riley also fessed up that Microsoft cocked up XP from a security perspective. "We let you down with XP," he said.


    What's the big security problem with XP? It installed by default with a firewall that denied inbound connections. It allowed people to easily give the kids and the wife non-admin access to a shared system. It automatically tells me when new security patches are available from Microsoft, and it always installs them without incident. It even complains (through a tray icon) when my virus-checker's images were getting out of date. I've been running the same XP system on my laptop now for about three years; I haven't had any spyware, viruses or worms yet, and the system still boots as fast as the day I got it. So...what's the beef with security?

    1. Re:What's the big security problem with XP? by twitter · · Score: 5, Insightful

      Vista is not selling, so XP must be killed. They do this with every OS, so you might as well imagine that it's 2011 and Win9 is out and they let you down with Vista.

      --

      Friends don't help friends install M$ junk.

  9. "We let you down with XP" by Chris+Mattern · · Score: 5, Insightful

    But now we have something *new* that fixes all those problems! Really! So hand us more money, now!

    Chris Mattern

  10. Re:I'm still curious... by Dystopian+Rebel · · Score: 4, Interesting

    Now, understand - there is always someone inconvenienced. I'm not talking about a perfect system. I'm literally asking, does the average American (or Brit, etc.) really feel that they've lost something specific?


    Sir, I suspect that one of the reasons why you don't hear an answer is that some of your interlocutors are frozen in disbelief.

    Although the USA may try valiantly, not everyone who displeases the government can be incarcerated. People think Guantanamo is bad; the US prison system is a systemic Guantanamo fit to burst with the highest percentage of incarceration in the world.

    Do all the people who are not incarcerated have any reason to be concerned? If the government is above the law and there is no law to protect them, the only protection they have is their sleepy ignorance of their vulnerability.

    You would call their sleepy ignorance proof that they have no cause for worry. Coincidentally, there's a group of men in the White House who agree with you.

    --
    Rich And Stupid is not so bad as Working For Rich And Stupid.
  11. The terrorists have already won ... by seyyah · · Score: 5, Funny

    because I just found myself agreeing with Microsoft ...

  12. Tiny Sliver of Hope by rossz · · Score: 4, Insightful

    People might get the wrong impression that I think all Muslims are murdering terrorists. Not so. There a lots of them who find the actions of the extremists repugnant. The problem is we rarely, if ever, here from them. Print a comic "insulting Mohammad" and there is rioting in the streets. An Islamic extremist murders a bunch of children and the silence is deafening. This MUST change.

    --
    -- Will program for bandwidth
  13. Re:What's smart about a false choice? by Thrip · · Score: 5, Interesting

    With real user and process separation Also available on Windows. I cry bullshit on that. I used to hear for a long time "So many people say Windows is insecure, but they run as Administrator all the time. They should run as an unprivileged user." And that sounded reasonable, so I pretty much believed it. So the next time I had to use Windows, I made an unprivileged account, and discovered that the restrictions placed on unprivileged users are so arbitrary and absurd that it's essentially impossible to work that way. You can't even change your own file associations. I had to keep logging in and out of my user and admin accounts all day to get anything done.

    Maybe things have improved in Vista, but the user separation on Windows XP seems to be designed to drive you insane.
    --
    I'm awake! The answer is BONK!
  14. Just perfect by HangingChad · · Score: 4, Funny

    The endless security measures imposed on society as a result of the "war on terror" have become overblown and intrusive, according to Microsoft Redmond senior security analyst Steve Riley.

    I agree with Microsoft on something. Great, just perfect. Now I have to get ready for the 4 horsemen, a rain of fire and the end of time.

    On the plus side that means I won't have to mow this week.

    --
    That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
  15. Re:It's not terrorism that threatens it by Grishnakh · · Score: 5, Insightful

    I disagree.

    It used to be this way with immigrants from Europe, etc. However, it is not this way with Islamic immigrants.

    A recent poll in Britain found that most second-generation immigrants want Sharia Law to be instituted there. This isn't the first-generation immigrants from Pakistan and elsewhere; this is their kids, who grew up in Britain. The first-generation immigrants don't seem to be causing any problems; they just want a decent life and job. Their kids are embracing the ways of radical Islam. The same thing is happening in France.

    There was a movie about this a while ago, called "My Son the Fanatic". Check it out.

  16. SoftGrid? Wha? by bussdriver · · Score: 4, Insightful

    Virtual machines per application?
    So next they will want to save RAM and speed things up with pass-thru hooks like what is already done with the virtual network interfaces but taken to the next level... It seems like a bad progression towards an actually working OS... How about we get the OS to WORK with the memory protection and better manage abstracted hardware??

    Am I the only one who sees virtual machines as a solution to problems that mostly shouldn't exist or at least not to the severity that one would seriously consider that a solution?