Slashdot Mirror

← Back to Stories (view on slashdot.org)

German Government Warns Windows 8 Is an Unacceptable Security Risk

Posted by timothy on from the nicht-ganz-recht dept.

An anonymous reader writes "Die Zeit has access to leaked documents from the German government warning that Windows 8 is an unacceptable security risk for sensitive workloads. The story is written in German here, but automatic translators (such as Google Translate) do a readable job. Particularly of concern is the inability to opt out of TPM 2.0 usage."

52 of 373 comments (clear)

  1. This is known by ciderbrew · · Score: 5, Funny

    Windows has always been a Security Risk.
    Danke.

    1. Re:This is known by Anonymous Coward · · Score: 5, Insightful

      Except in the last few months we have had complete and utter proof we are no longer paranoid enough of U.S.A. intelligence agencies and their co-opting of U.S.A. companies to do their work for them.

      At this point we can completely trust that Microsoft Windows is and will be used for industrial and governmental espionage activities by the U.S.A. intelligence agencies.

    2. Re:This is known by Anonymous Coward · · Score: 3, Funny

      It really isn't all bad, it created a need for multiple virus and malware businesses.
      And untill Win8 has always helped chip companies to sell faster processors to deal with the increasing slowiness for each version of Windows.
      Oh..right... maybe it sucks.

    3. Re:This is known by Anonymous Coward · · Score: 3, Informative

      When you're a government, there's a difference between a product whose bugs can be mitigated with sufficient money thrown at security vendors, and a product that by design keeps control in the hands of a company whose government has a known history of spying on you. The TPM in Windows 8 is the latter.

    4. Re:This is known by spire3661 · · Score: 4, Insightful

      It bothers me that you still call it 'paranoia'. WE weren't paranoid, they really were doing bad shit.

      --
      Good-bye
    5. Re:This is known by DickBreath · · Score: 3, Interesting

      Are you trying to suggest that an OS from Microsoft would have debug identifiers called NSAKey? Surely such a thing would never happen.

      --

      I'll see your senator, and I'll raise you two judges.
  2. Windows is an option today - not an requirement by madsdyd · · Score: 5, Insightful

    Good thing alternatives exists.

    I am not advocating they should "just change". I am just saying that on a personal level I am very happy that thrustworthy alternatives exists, and that Windows (no longer) is an requirement at the workplace or at home, but just an option.

    Thank you, Stallman, Linus, and all you other people around the world, who have used your time to provide us with these alternatives.

    And, yes, I know some people will claim that Windows is an requirement for the specific uses you have. I don't really care - for the wast majority of computing users around the world, Windows is an option, not an requirement. And, I am happy for that.

    1. Re:Windows is an option today - not an requirement by inking · · Score: 4, Interesting

      Considering that the vastest majority of users have very basic needs--to quote someone I knew "I need to be able to use Facebook and the Internet"--modern Linux distributions and probably OSX are actually a better solution for them than Windows due to the simple fact that they are currently significantly less likely to get malware and thus break them.

    2. Re:Windows is an option today - not an requirement by Anonymous Coward · · Score: 3, Informative

      The license of Unix we use costs about $20,000 for the number of users we have.

      Not practical for most people. Thank the people who make it practical. It's you who is wrong, not him.

    3. Re:Windows is an option today - not an requirement by RotateLeftByte · · Score: 3, Funny

      Balmer is that you?

      --
      I'd rather be riding my '63 Triumph T120.
    4. Re:Windows is an option today - not an requirement by blackest_k · · Score: 3, Interesting

      I'm not so sure if running Linux would be any safer with a machine that has the trusted computer module built in. Does it even need to be a separate piece of silicon or could it be built into the cpu?

      Maybe intel inside, might at some point change meaning and at what point does this occur ten years time, now or already?

      Maybe Germany might create a demand for non trusted computers but would they keep them clean or just put in their own backdoors?

          Ok we know that the USA spies on everyone even their own, but lets not pretend it isn't happening all over the world. Name a trustworthy Government any where.
           

      --
      Blarney Quality Restaurant, Plants
    5. Re:Windows is an option today - not an requirement by Pi1grim · · Score: 3, Interesting

      Yeah, because BSD worked out so nicely for FreeBSD and others in the family. And BSD community is now thriving, thanks to all the commits and return of code from the most open OS - iOS and OS X. Oh, wait, they don't? Ah, who cares about facts, when I can throw dirt at GPL, because those dirty programmers won't let me take the source add some stuff for incompatibility and then sell it off as my own, without sharing source code with the users, they 're clearly infringing on my entitlement to their work.

    6. Re:Windows is an option today - not an requirement by Cassini2 · · Score: 5, Interesting

      The concept behind TPM could work really well, if every user compiled their own operating system, and set up the unique keys such that only their code was trusted. Thus, every user would have complete control over all the source and binary software on the system. Even in a business environment, if at least the business was in complete control of all of the source and binary software, then TPM would be of some use.

      The problem is that Microsoft wants to use TPM to play a bunch of DRM movies. The DRM schemes are inherently insecure, so Microsoft opens its security window accordingly. The result is that Microsoft's security model becomes "trust Microsoft, the NSA, movie companies. music companies, game companies, and etc", with no one knowing who the "etc" is. As such, from a secure systems perspective, the resulting DRM operating system has no obvious chain of accountability. Worse, any lesson in security starts with "never trust the vendors default installation." DRM assumes "never trust the customer." With the end result being that no one trusts anyone and TPM can never be secure (with commercial closed-box software.)

      For TPM to truly deliver on its security promises, everyone needs to switch to open source software where everyone compiles unique binaries with custom keys. Microsoft will never do this.

    7. Re:Windows is an option today - not an requirement by Karzz1 · · Score: 4, Informative

      ....was essentially given away to Universities for free.

      Actually it was licensed with the source code to Universities. This was still a proprietary license and the Univerities could not re-distribute except under certain conditions. This licensing was what lead to the lawsuit between Unix System Laboratories (USL) and the Univerity of California, Berkeley when the USL attempted to claim all the changes that UCB made to the source belonged to USL. There was a settlement behind closed doors, however as part of the SCO lawsuits I believe the terms of this agreement were made public.

      Interesting read on this here.

      --
      Beware of he who would deny you access to information, for in his heart he dreams himself your master.
    8. Re:Windows is an option today - not an requirement by unixisc · · Score: 3, Informative

      But would require CS majors to know how to work them, and was not available on normal PCs, which were too weak then to run Unix. So anyone who could afford PCs would then need DOS, and then on top of that, things like WordPerfect, Lotus or dBase. So it's indeed the explosion in the usage of Linux that's made this possible.

      Linux has also lowered the usability bar. With Unix, one was stuck with Bourne Shell or C Shell, and could only enjoy GUIs like OpenLook or Motif if one was at a company or university that had installed workstations from Sun, DEC, SGI, et al. With Linux, GUIs like KDE had been the default from day 1, and now there's a bonanza of them - GNOME, LXDE/Razor-qt, XFCE, Unity, Cinnamon, et al.

  3. Not just Win8 by geek · · Score: 3, Interesting

    Everything Microsoft produces. I have the misfortune of working with the MS developers on a regular basis and if I had a nickle for every time they told me they didnt know how their own software works I'd be richer than Bill Gates.

    Nevermind the inherent security flaws in their crap OS, my concern, and the concern from every foreign country should be MS's willingness to work with the NSA. If ever there was a time to ditch Microsoft and go Open Source it is now.

    1. Re:Not just Win8 by h4rr4r · · Score: 5, Insightful

      Are you totally ignorant of the software world?

      Linux is at this point more popular than windows, if we count embedded devices and servers. Windows has come a long way, but until very recently it had some serious problems. The issue stems from the design philosophy not any level of obscurity.

    2. Re:Not just Win8 by Anonymous Coward · · Score: 5, Insightful

      > The only reason that I can think that an open source OS would be more secure than Windows is because of obscurity.

      No, obscurity doesn't offer much security at all.

      Open Source stuff tends to be more secure because it has so many people looking at it, from many different perspectives, both professionals and amateurs, all working together to improve the code and make it more secure.

      Microsoft, on the other hand, are the only people who can patch and improve their code. And they have demonstrated again and again that they can't be trusted to do this in a timely and useful manner.

    3. Re:Not just Win8 by Skapare · · Score: 5, Insightful

      The advantage of Open Source is that you or anyone else can fix the software if/when security problems are found, whether in the OS, core libraries, network stack, or any Open Source applications. We are not dependent on the original developers to make any such fixes. I have done this a couple times in the past by fixing security issues in open source code before the developer fixes were available (I could have waited a day and got the developer fixes).

      --
      now we need to go OSS in diesel cars
    4. Re:Not just Win8 by LQ · · Score: 5, Funny

      I had a nickle for every time they told me they didnt know how their own software works I'd be richer than Bill Gates

      If it takes them 10 secs to say that, and Bill Gates has 50 billion dollars, it would take you 16000 years to get that rich.

    5. Re:Not just Win8 by pr0fessor · · Score: 3, Insightful

      I see it this way... people that write malware, trojans, or what ever do so to make money and they pick the largest easiest target doesn't matter the OS or the software that runs on it but one way or another they will make money. You cannot make an OS secure enough to persuade them to do something else when there are so many gullible user to take advantage of. This is why there is now boat loads of malware, adware, crapware for android.

      Visual Studio could be better but it's more like a rapid development environment and shouldn't be compared to a regular IDE.

    6. Re:Not just Win8 by kiwimate · · Score: 3, Insightful

      The advantage of Open Source is that you or anyone else can fix the software if/when security problems are found, whether in the OS, core libraries, network stack, or any Open Source applications.

      Theoretically? Totally, no worries. Alpha plus.

      In the real world? How often does that occur? How many people are investigating the code to find security problems? How many of those people are sufficiently competent to fix security problems?

      There are bugs which remain open for years. There have been reports of security flaws discovered which have been present for years before being detected. If thousands of developers truly were poring over the code, this shouldn't occur.

      I won't deny the advantage you state is very real. I will assert that it is an advantage which is rarely exploited in any meaningful fashion.

    7. Re:Not just Win8 by roc97007 · · Score: 4, Funny

      Thank you, Sheldon.

      --
      Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
  4. How is TPM a security risk? by afidel · · Score: 3, Informative

    TPM is nothing more than a hardware keystore, I'm not sure how they'd see it as a security risk unless they're worried that the NSA has the MS signing key's private key (probable) but even then it doesn't exactly give you worse security than other OS's without access to a hardware keystore.

    --
    There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    1. Re:How is TPM a security risk? by Sique · · Score: 5, Interesting

      Just read TFA, it does a good job at explaining the security risks and concers. One important concern is that while the BSI (the german Federal Office for Information Security) was involved in the TPM 2.0 specification, all their proposals were denied, while the proposals the NSA had were accepted. And the final acceptance was announced with "The NSA agrees".

      --
      .sig: Sique *sigh*
    2. Re:How is TPM a security risk? by Anonymous Coward · · Score: 4, Informative

      A hardware keystore you don't have the keys to.

    3. Re:How is TPM a security risk? by Anonymous Coward · · Score: 5, Informative

      http://en.wikipedia.org/wiki/Trusted_Platform_Module [Wiki]
      See "Criticism" section:

      "... The concerns include the abuse of remote validation of software (where the manufacturer — and not the user who owns the computer system — decides what software is allowed to run) and possible ways to follow actions taken by the user being recorded in a database, in a manner that is completely undetectable to the user.
      In simple words, it removes user's ability to control the hardware he owns, reducing the device to hardware maker's stealthy agent.
      It is "Trusted" to hardware manufacturer, but, the same makes it "uncontrollable" for the user - making the user dependent on trust to the manufacturer, or whatever government or authority there is at particular location."

    4. Re:How is TPM a security risk? by Megane · · Score: 3, Funny

      I think rectal divination is the preferred means on Slashdot.

      --
      #naabhaprzrag, #sverubfr-000, #agi-fcbafberq, negvpyr[pynff*=' negvpyr-ary-'] { qvfcynl: abar !vzcbegnag; }
    5. Re:How is TPM a security risk? by Jesus_666 · · Score: 5, Informative

      The concern is mainly that the system hinges on the TPM, which in version 2.0 of the standard is controlled by the OS and can't be deactivated. Either you unconditionally trust the operating system (and its vendor) or you can't trust the entire system. Plus, the NSA got to mess with the standard while at least the German BSI (who issued this warning) tried but didn't get anywhere (e.g. they failed to get an opt-out function added to the standard). Plus, all TCG members are American companies and several of them are known to have made deals with the NSA before (such as giving information about security flaws to them first).

      In short: The BSI doesn't unconditionally trust Microsoft around sensitive documents and recommends that no TPM 2.0 compatible OS from Microsoft is used where those might show up because TPM 2.0 makes trust in the OS vendor mandatory. Win8/TPM2 is okay for home users who don't want to think about computer security but it has no business being around stuff that might cause harm if leaked to foreign intelligence agencies.

      --
      USE HOT GRITS WITH STATUE OF NATALIE PORTMAN (NAKED AND PETRIFIED)
    6. Re:How is TPM a security risk? by IamTheRealMike · · Score: 5, Interesting

      So we have a case of sour grapes, then? Unless one of the NSA requests was "we want a backdoor" then this by itself doesn't mean much because the NSA is a weird creation that not only spies on everyone, but has an "information assurance" department that tries to design secure systems for US usage. They're behind the creation of SELinux which is both highly sophisticated and well reviewed by independent third parties. It does not have back doors. Also, many important constructions in cryptography were designed by the NSA. For example SHA2 was designed by the NSA and it is extensively studied. It has never been found to contain even a hint of a back door.

      This crap about how the TPM allows Microsoft to remotely control computers for DRM purposes came up over a decade ago when trusted computing extensions were first designed. It was FUD back then with no connection to reality, and it's certainly FUD today too. If you want to learn about the actual next-gen TC technologies, go and read up on Intel SGX. Then go and read this post on bcflick, a use of the TPM and trusted computing designed to make Bitcoin wallets more secure. That's the kind of thing the tech is designed for. The TPM isn't even electrically capable of controlling the CPU.

    7. Re:How is TPM a security risk? by gstoddart · · Score: 5, Interesting

      Unless one of the NSA requests was "we want a backdoor" then this by itself doesn't mean much because the NSA is a weird creation that not only spies on everyone, but has an "information assurance" department that tries to design secure systems for US usage.

      But since nobody actually knows, and because if the NSA informed Microsoft to hand over the keys they'd be legally required to, and because while they help design 'secure systems for US usage' nobody trust them for anything that isn't the US.

      So, it's OK if you want to trust TPM, Microsoft, and the NSA. But that doesn't mean that the rest of the world has any reason to do so.

      I think you are increasingly going to see governments around the world look at Microsoft and say "do we want to put all of our infrastructure in the hands of someone who has to take orders from a US spy agency?" And I think the only logical conclusion is going to increasingly be "no, not really".

      --
      Lost at C:>. Found at C.
    8. Re:How is TPM a security risk? by cardpuncher · · Score: 4, Insightful

      Some issues:

      It's a hardware keystore under the control of the vendor: they have access to your keys, you don't have access to their keys.

      If you've bought only-certified-for-use-outside-the-US hardware you may find yourself only able to run the OS-with-NSA-backdoor "export" version of your chosen operating system.

      If your software vendor decides (or has decided for them) that your web browser (for example) should not permit you to access certain websites, it can be enforced in hardware outside of your control.

      The remote "attestation" feature as originally designed could effectively identify individuals (or at least individual pieces of hardware) on the Internet, effectively abolishing any vestige of privacy. It is siad that Direct Anonymous Attestation introduced in the latest round of TPM specs permits the integrity of the TPM (for Digital Rights Management) to be tested without revealing the identity of the device.

      In other words, if you have control of the TPM, it's exactly "just" a hardware keystore. However, if you don't have control, or if control must be ceded to another party in order to run some particular piece of software, you are entirely under the control of that party - and whoever controls them. And if you suspect your security is being compromised, you can't necessarily fire up a debugger or trace system calls, because unless that debugger has been signed by the OS vendor it's not going to run and you have no means of knowing whether it behaves as documented. It's a potential rootkit mechanism: you have to trust the OS vendor implicitly. And that's the point - it's not about allowing you to "trust" the vendor, it's about the vendor's "trust" in their control of you.

    9. Re:How is TPM a security risk? by thegarbz · · Score: 5, Insightful

      I was also a nice trustworthy person which caught people by surprise when I stole money from their wallets.

      Ok no I wasn't but just because the NSA has at times released software without backdoors should in no way influence your opinion of their future performance, especially given future performance is malware that provides a back door, not to mention back doors to every ISP in the country, spying on international conferences etc. Honestly it would be outright foolish to assume that anything they had a major hand in is safe.

      That said TPM serves one purpose, secure the system from the prying hands of the user. The only thing holding back DRM being the primary beneficiary of TPM is the lack of adoption and the fact that TPM is entirely voluntary. If every computer had a TPM module regardless of the users preference you could be damn certain that many DRM schemes would be using this. A trusted key store safe from the user is exactly the kind of security system a DRM scheme needs to operate well.

      Just because something hasn't (yet) come true does not make it FUD.

    10. Re:How is TPM a security risk? by cbope · · Score: 5, Insightful

      This. This is overblown BS written by someone who doesn't understand TPM and what it can and can't do.

      The story also fails to mention that the TPM module is usually an option and typically only available on corporate PC's. Not to mention the fact that it can be disabled in BIOS/EFI if you are admin over that system.

      TPM is not even required by Windows 8. RT... well that's another issue but this article is mainly about PC's, not RT tablets.

    11. Re:How is TPM a security risk? by VortexCortex · · Score: 4, Insightful

      I think you are increasingly going to see governments around the world look at Microsoft and say "do we want to put all of our infrastructure in the hands of someone who has to take orders from a US spy agency?" And I think the only logical conclusion is going to increasingly be "no, not really".

      Oh hey, look, a Windows Update -- A remote root level patch to my operating system, one that in the past has had glaring issues with certificate signing, and now we suspect could be gag ordered and required to hand over the keys to install anything the NSA wants into any Windows system on the planet.

      I think the question will be, "Do we want to use software with a HUGE BACKDOOR in it for anything at all ever?" And I believe the conclusion is going to be far worse than, "no, not really".

      Meanwhile the "conspiracy nuts" who've seen the writing on the wall for decades (Omnivore, Carnivore, ECHELON, PRISM, etc) can smugly declare either, "Finally" or "I told you so." then go right back to being ignored by fools at large.

    12. Re:How is TPM a security risk? by Kjella · · Score: 5, Informative

      The only thing holding back DRM being the primary beneficiary of TPM is the lack of adoption and the fact that TPM is entirely voluntary. If every computer had a TPM module regardless of the users preference you could be damn certain that many DRM schemes would be using this.

      Microsoft has announced that from January 1, 2015 all computers will have to be equipped with a TPM 2.0 module in order to pass the Windows 8.1 hardware certification. And while not every computer will run Windows, I very much doubt you'll find a computer that can't run Windows so that's the end of TPM-less hardware. Of course Windows 8.1 will run on non-TPM hardware but I figure in a few years Windows 9 will refuse to run on anything but TPM-enabled hardware. That's the end of the PC as an open platform and you can already prepare for the funeral.

      --
      Live today, because you never know what tomorrow brings
  5. Re:What? by Anonymous Coward · · Score: 5, Informative

    It is insecure because you CAN'T use it for your purposes.

    It is only there for MS and, by extension, the NSA.

    You didn't think that secure boot crap was for YOUR benefit, did you?

  6. Re:The next time you call FauxNews Sensationalisti by Sique · · Score: 4, Informative

    If you actually had read the article, you would have seen that this is especially mentioned. Maybe the article is a little more insightful and balanced as you can imagine?

    --
    .sig: Sique *sigh*
  7. And the follow-up article by DingerX · · Score: 4, Informative

    Where the BSI takes issue with their reporting.

    Of course, with the extent now clear of the US government's use of US IT companies to maintain American political and economic advantages, if you were running a non-US-based company or a non-US-governmental organization, you'd want to do as much critical business with non-American hardware, software and services as possible.

  8. NSA VPN searches on XKeyScore by Anonymous Coward · · Score: 4, Interesting

    One of the example searches about XKeyscore, (the NSA software that lets them do ad-hoc searches on everyone's private comms) was

    "show me all new VPN connections in country X"

    How does it get the VPN connection data? When I investigated Windows *7*, I notice that when a VPN connection is made by the OS, the software makes two connections, one directly to a Microsoft server bypassing the VPN and one through the VPN. Both share session ids. It seems to flag to Microsoft (and NSA) the two IP addresses (via the VPN / original un-routed VPN address).

    So they're focussing on Windows 8, but Windows 7 has its share of nightmares.

    Then has anyone looked at Symantec / Norton 360 etc.? With all it's "password vault" features and online URL checks. It could be the NSA has served these companies with secret warrants. So we may not be able to trust that it will flag NSA spyware, or that passwords are not making their way into the Utah Stasibase.

  9. Re:What? by Sique · · Score: 4, Interesting

    It is insecure because you have to use TPM and can't opt out. So it's not you defininig the security parameters, it's Microsoft. And the agencies sitting in Microsoft's back and dictating the rules.

    --
    .sig: Sique *sigh*
  10. BSI published a clarification by Golden_Rider · · Score: 5, Interesting

    The BSI (Bundesamt für Sicherheit in der Informationstechnik) published a clarification after websites reported about that Windows 8 warning: https://www.bsi.bund.de/DE/Presse/Pressemitteilungen/Presse2013/Windows_TPM_Pl_21082013.html

    Basically, they pedalled back a bit. They now claim they never warned about Windows 8 itself, but about possible risks when combining Windows 8 with TPM 2.0, because the user no longer has complete control over his system and that because of that, the user could end up in a situation where the system is permanently unusable. They no longer mention the US / the NSA and the possibility for backdoors, instead they now just mention the possibility of "sabotage", and the need for an opt-in AND opt-out for things like TPM 2.0.

  11. Re:What? by gstoddart · · Score: 4, Informative

    This doesn't make any sense. It's insecure because you can't NOT use TPM?

    If you don't trust the security of TPM, or that it doesn't have in-built stuff the NSA can use to spy on you ... then, yes, you have to consider it insecure.

    It's a 'secure' system you don't control, which means if you need a secure environment, you need to trust a 3rd party.

    If that 3rd party is Microsoft, who we know is beholden to the NSA -- then you betcherass it's considered insecure. Essentially, the German security people are saying "we don't trust Microsoft or the NSA/US government" -- therefore the entire platform is considered not secure.

    One of the biggest complaints about TPM is that you have to explicitly trust whoever controls the keys and the like. And if you don't control it, and don't trust the 3rd party, the whole thing is garbage.

    So, it makes perfect sense -- because TPM has never been about the users ability to define their own trust, it's about the manufacturer saying "you're going to have to trust us or not use our stuff". So, not using their stuff is the logical conclusion.

    --
    Lost at C:>. Found at C.
  12. Oblig Blackadder quote by Cryacin · · Score: 5, Funny

    Have you seen any suspicious operating systems? Nein! I mean... 8!

    --
    Science advances one funeral at a time- Max Planck
    1. Re:Oblig Blackadder quote by IwantToKeepAnon · · Score: 4, Funny

      Have you seen any suspicious operating systems? Nein! I mean... 8!

      How many planets are there? Nine! I mean... 8!

      --
      "Happy families are all alike; every unhappy family is unhappy in its own way." -- Anna Karenina by Leo Tolstoy
  13. Re:What? by gstoddart · · Score: 4, Insightful

    When it comes to hardware, the only way to completely trust it is to go to where the chips are being manufactured, and study the entire design of each chip being used in whatever device you're worried about.

    True as that may be, there are encryption keys stored in there that the owner of the device doesn't control.

    So, if I'm building a secure environment, and I know there is a component I do not control or can't isolate (you can't disable this, remember) -- then I have to try to remove that component. That component is TPM, which is more about DRM than securing the computer for the owner.

    I'd much rather trust Microsoft than some generic Chinese chip maker.

    Well, have fun with that.

    Due to the Patriot Act, Microsoft is no longer a trustworthy entity. In fact, no US company is anymore. Not for their cloud services, and not for any installation which needs to be secure.

    If the US government wants to make US corporations an arm of their spy agencies, don't bitch and moan when other governments decide there are risks they can do without in using those products -- because unless they're willing to take MS or the NSA at their word (and, really, why would they?), they have to assume these systems are compromised.

    A year or two ago when some of us were saying these cloud services were something you couldn't trust due to the Patriot Act, people were saying "oh, don't panic, it's no big deal". But since it's now patently obvious that the NSA can and does tap Microsoft to provide them some data -- I would have to say it's pretty much objective fact that, no, you really can't put trust in them beyond what you can 100% control.

    You feel free to trust who you like. And the rest of the world will do the same. I'm sorry, but the US government and Microsoft have pretty much demonstrated that they're not something you can trust.

    --
    Lost at C:>. Found at C.
  14. Privacy issues by jones_supa · · Score: 3, Informative

    I think the Microsoft Account and related stuff is also quite bad privacy and security risk. Apparently 8.1 will send your searches to Microsoft in a similar way to Unity's "Amazon shopping lens". When enabled, the IE SmartScreen filter will send your browser URLs to MS. All sorts of little things here and there -- "would you like to send information to company X to improve our services". I suppose you can get rid of most of it by carefully unticking each buried checkbox, but it's getting increasingly hard to opt out of this kind of junk. What if I just want to be alerted about Patch Tuesday updates?

  15. Re:What? by gstoddart · · Score: 3, Informative

    Why is it that people on slashdot dont have a clue how technology works anymore?

    Why is it that every smarmy little shit on Slashdot thinks everyone else is an idiot?

    Don't want to run software that utilizes the TPM chip instead of some other certification method, then don't run that software.

    Yes, exactly. But in this case "don't run that software" applies to Windows.

    It's the OS which is utilizing the TPM, and therefore it's the OS you can't trust. What part of that are you not understanding?

    This was the whole point of TFA -- since Windows 8 uses this TPM shit, and you can't turn that off, you inherently can't trust the OS. The software you stop using because you don't trust the TPM isn't your own software, it's the fucking OS.

    --
    Lost at C:>. Found at C.
  16. Re:The next time you call FauxNews Sensationalisti by devent · · Score: 3, Informative

    As a German I get regularly headaches when I'm watching Fox News or similar "news". The American news are like game shows, flashing light, CGI effects, running texts everywhere, cut screens, cut clips. It's like news for babies, like the assumed average concentration span is only 5 seconds of the viewers.

    --
    http://www.mueller-public.de - My site http://www.anr-institute.com/ - Advanced Natural Research Institute
  17. Definition of "Quality" by Zinho · · Score: 3, Funny

    You must be using the industry definition of "Quality", i.e. compliance with quality standards like ISO 9001. Your comment reminds me of a business plan, "Monkey Maid Service", made by an engineer friend of mine:

    Step 1: Purchase a supply of monkeys, monkey housing, and monkey chow from traceable sources, documenting the origins of every piece of material involved.
    Step 2: Draft a standard process for "Performing maid service" using the monkeys purchased in step 1. If I recall correctly, his rough draft of this process included "dress the monkeys in French maid costumes, then release them in the house for the period of time specified in the contract".
    Step 3: Have supervision in place to ensure work performance follows documented procedure, and record performance metrics (% monkeys dressed as French maids, deviation from contract time) for auditing purposes.
    Step 4: Advertize the service as ISO 9001 compliant.*

    If every can of Budweiser tasting the same is your definition of quality, then sure, it's a quality product. By the way, my friend has a maid service you may be interested in using after your next party.

    *I've probably missed a few crucial 9001 compliance steps; quality geeks, please don't crucify me over that ;)

    --
    "Space Exploration is not endless circles in low earth orbit." -Buzz Aldrin
  18. Re:What? by gstoddart · · Score: 3, Informative

    My understanding was TPM became mandatory with Win 8, and in previous versions was optional.

    It's the non-optional part that is the problem. Microsoft made it mandatory, and that changed quite a bit.

    So, if you deem TPM isn't trustworthy, it makes Win 8 not trustworthy.

    --
    Lost at C:>. Found at C.
  19. Re:The next time you call FauxNews Sensationalisti by Darinbob · · Score: 3, Funny

    Once the reprogramming has been completed the headaches will go away.