Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Microsoft Software Linux

Cringely: MS To Hurt Linux Via USB Enhancements 877

frogspit writes "In this article, Cringely suggests that MS's proposed enhancements to USB to address security issues have the added benefit (for them) of hurting Linux."
This discussion has been archived. No new comments can be posted.

Cringely: MS To Hurt Linux Via USB Enhancements

Comments Filter:
  • bad presumption.... (Score:2, Interesting)

    by csmacd ( 221163 ) on Friday September 17, 2004 @01:05PM (#10277899) Homepage
    An "enhancement" could always be included in a service pack to allow DRM CDs on 95,98,etc.

    What about legacy auto/component players?

    Here's to hoping the OpenBIOS project can workaroud some of this junk.
  • Enhancements (Score:3, Interesting)

    by Zorilla ( 791636 ) on Friday September 17, 2004 @01:07PM (#10277929)
    If enhancements were to be made to USB, information on the specs would have to be provided as well, and hopefully not just to those who fork up the dough for it. In this case, saying it would hurt Linux would be saying that the development for an enhanced USB interface would take a really long time. I doubt it would be true if support was important enough. Was supporting USB 1.1 and 2.0 in Linux really a pain at all when it came out?
  • Not Practical (Score:5, Interesting)

    by Timber_Z ( 777048 ) on Friday September 17, 2004 @01:11PM (#10277971)
    As big as Microsoft is, they can't simply make useless all usb drives out there with a flick of a switch, as the artical sugests.

    More likly, Longhorn will by default allow standard behavior from usb devices.

    If and only if the administrator of the OS flips a switch will the usb port be (Disabled / Read only / {Custom USB Writeable})

    So while they may require a Longhorn only usb drive, in certain scenario's, regular ones should still work in most situations.

    This is of course only conjecture, only time will tell for sure what will happen.
  • Re:Wow, just wow.... (Score:2, Interesting)

    by tomhudson ( 43916 ) <barbara,hudson&barbara-hudson,com> on Friday September 17, 2004 @01:11PM (#10277972) Journal
    This has got to be the most inane paranoid rambling I've read since I flipped thourgh an X-Files novel.
    I've got to agree. There is NO way to make any OS or device completely secure, and the best security addresses the PEOPLE component, which this fails to do.

    And, as far as Cringley's statement about Microsoft going after people who reverse-engineer it to allow for compatability w. open-source software, that's a non-starter for 95% of the world's population, where such reverse-engineering is okay - and in the US, the justice department would probably frown upon yet another monopoly action by the Beast from Redmond.

    In other words, this is more of a brain fart than a brainstorm.

  • by brucmack ( 572780 ) on Friday September 17, 2004 @01:14PM (#10277992)
    How are they making the open standard somehow Windows-only? Doesn't the fact that it is an open standard mean that someone can just put the support for the new standard into Linux and be done with it? Or does the new standard actually rely on some propriatary software from MS?
  • by Anita Coney ( 648748 ) on Friday September 17, 2004 @01:14PM (#10278005) Homepage
    I just don't get why USB hard drives are such a security risk. Any employee who wanted to steal a bunch of data is not going to be stopped by this. All he would have to do is open up his computer and borrow the HD for a weekend.

    Heck, he could just email the data to himself at home!

    And let's be serious, how many employees really have access to valuable and confidential information?!

    When I first heard about this alleged security problem I immediately thought, what's Microsoft's real purpose? Cringely might be on the right track.
  • Intel (Score:3, Interesting)

    by roman_mir ( 125474 ) on Friday September 17, 2004 @01:15PM (#10278013) Homepage Journal
    PC companies build what Microsoft tells them to because doing otherwise risks having their hardware go uncertified, or even worse, simply not function with Windows. - I wonder what processors would MS software run if not Intel's, I don't completely understand how MS came into position to dictate its terms to the hardware manufacturer. I wonder how much time will it take MS to come up with their own processor and the rest of it (sort of like Apple but without IBM) maybe they MS will can even cooperate with Sun on this front.

    In any case USB is definetely an important piece of hardware and ubiquitous at that. I don't believe that the home users will care about the security of their USB devices more than they care about security of their browsers and email clients. If the new standard is released it maybe picked up by very security minded folks, like the security services, but MS will have tough time convincing most companies to switch to yet another hardware platform (at least within the next 5 years.)


  • I vote: not so crazy. I am of the opinion (and have been for a couple of years now) that they have a top-secret lab in an underground bunker where they are secretly working on a Windows desktop environment running on a Linux kernel, as well as Linux versions of Office and all their main applications.

    Why?

    That's what I'd be doing if I were them. They can afford to hedge their bets on this one if they are really as scared as everyone says they are. One of the serious advantages of FOSS platforms is because the up-front costs are so low, you can start development before you decide if you have a product or not.
  • Bias (Score:5, Interesting)

    by RzUpAnmsCwrds ( 262647 ) on Friday September 17, 2004 @01:27PM (#10278146)
    This story is ripe with bias. Microsoft isn't stupid or powerful enough to force everyone to abandon all of their USB devices.

    That's why neither this nor NGSCP (Palladium) are of any concern.

    Everyone wants to FUD about how Microsoft is going to make a BIOS that "locks out linux", or a USB standard that locks out old devices. It's not going to happen. 5 years from now, you're still going to be able to run Linux on your computer, and you're still going to be able to access your USB devices in Longhorn and Linux.

    Now, certain devices - music players, primarily, will probably be "secure" (DRM encumbered). But you'll probably still be able to use them in Linux, so long as someone writes the drivers. The new Microsoft USB-spec is just a way for media players to confirm to the OS (and DRM framework) that they will obey the DRM restrictions.

    It's pointless to debate this anyway. It hasn't happened yet. Remember back in 2001 when Slashdot was spreading FUD about Palladium? As it turns out, we can still run Linux on our computers, and we will be able to do so for the immediate future.
  • by moberry ( 756963 ) on Friday September 17, 2004 @01:29PM (#10278166)
    The consumer population will not go along with the idea of "sorry, your old device won't work. please buy a new one". Why do you think there are RS-232 ports on computers STILL, i havent seen a serial device in years. Two things could happen

    • MS does this, and everyone switches to firewire, or some other hot new standard
    • Manufacturers write drivers for there devices, and go on supporting them

    IMHO, i think that manufacturers will just package generic USB drivers with there devices.

  • by Whatthehellever ( 93572 ) on Friday September 17, 2004 @01:36PM (#10278246) Homepage
    It's sad that they publically plan on violating the antitrust lawsuit provisions. What's worse, they'll get away with it.

    After this Wednesday's "critical" security update what scrambled the BIOS on my notebook, rendering it trash (according to Toshiba, it cannot be fixed, but replaced by buying a new notebook), I know Microsoft is in the business of fucking over everyone in the world. Yes, it took this long for me to figure it out.

    I DO have a fix, though. Before I spell it out for you, I want you to know that I have been a Solaris user since the late '80s, been working with Linux since the mid '90s and have been using computers since Microsoft Xenix was sold by Tandy.

    My personal solution: I'm sick of this shit. I am using my employer's computer (thanks for the use of the T3 line) to sell off my existing computers. Afterwards, I am cancelling my DSL subscription.

    I've had it and Microsoft is the reason. Now, don't think I'm going to go live in a forest somewhere, roasting squirrels over an open fire, no. I'm just removing one source of stress in my life. No more email or spam. No more blue screens of death. No more "This dosen't work in Linux because Microsoft won't allow it to." All gone. This is also my last Slashdot post (sniff).

    I'm sure that the removal of so much stress in my life will allow my blood pressure to go down and for me to spend more time with my children. Wish me luck.

    r.
  • by BridgeBum ( 11413 ) on Friday September 17, 2004 @01:36PM (#10278256)
    Third, and here's where I get crazy, I believe that at some point in the next five years, Microsoft is going to produce Linux software (for crazy reasons that I'll keep to myself until they begin to sound less crazy.)

    Why is that even a little crazy? Microsoft has been quietly writing Mac applications for a long time now, and will for the forseeable future. Granted, Windows won't run on Mac hardware, so it's not a direct comparision. However, if Linux does make a deep market penetration with Joe Homeuser or makes it to the desktop of MyCorporation LLC, why wouldn't MS want to offer it's Office suite and other products for those platforms? With Linspire PCs now being sold at Walmart, is it such a large extrapolation to see home users chosing to go down that road in ever growing numbers?

    If that does happen, wouldn't it make financial sense for MS to start writing Office, Outlook, etc. for Linux?
  • by sglane81 ( 230749 ) on Friday September 17, 2004 @01:41PM (#10278312) Homepage
    And let's be serious, how many employees really have access to valuable and confidential information?!

    More than you would think apparently. Sysadmins, DBAs, developers... depending on your business model of course. At the very least, your organization would have sysadmins who would have full access to all the systems. Not one guy, but a group of sysadmins.

    Even if MS gets all those hardware manufacturers on board with DRM, TCPA, etc, I am not concerned. There will always be that one company who makes a system which doesn't comply with MicroSofts TCPA. That one vender will be made into a very profitable company overnight.

    Microsoft can flex its muscles all it wants. They've tried it for years. Like MSN blocking all but IE (failed), Sender-ID (failed), IIS not working with anything but IE (failed). MS Office is their only real stronghold, but that happened over 10 years ago (noting that wordpad was formerly known as MS Word 3?). I still run a windows 98 game for gaming. Mainly because it isn't as bloated. Windows 95/98 still run win32 binaries just like XP. There have been a few nice updates with 2000 (better SMB auth), but nothing worth upgrading for. What sheeple don't realize is that Microsoft can't break the binary compatibility of thier last OS version without cutting off tons of people. In order for TCPA and this USB lockout to work, there would have to be a MAJOR shift in PC hardware and most vendors won't cut off their customers.

    Microsoft is just not big enough. By that I mean, there will always people out there who do not conform and succumb to marketing hype.
  • Re:DMCA (Score:2, Interesting)

    by Pig Hogger ( 10379 ) <pig.hogger@g[ ]l.com ['mai' in gap]> on Friday September 17, 2004 @01:45PM (#10278342) Journal
    Watch, MS will copyright some key element that allows the OS to interface with the USB devices - prohibiting anyone from making compatible software.
    The DMCA only works in the USA. Hence it won't prevent anyone from hosting the proper driver on a site outside the US (say, in Windsor, Ontario) and publishing instructions on how to install it.

    Voilà, problem solved!

  • by AJWM ( 19027 ) on Friday September 17, 2004 @01:45PM (#10278349) Homepage
    You were probably joking, but in case anyone else was wondering, there are already plenty of Firewire hard drives, DVD drives, and uncompressed-video cameras out there.

    Oracle has released software to allow multiple Linux boxes to share a Firewire hard drive in a "poor man's SAN" arrangement.

    Firewire (IEEE-1394) has many advantages over USB -- including speed (USB 2's theoretical 480 Mbps in practise comes in slower than 1394a's 400 Mbps, and far short of 1394b, which goes to 800 Mbps now and 1600 and 3200 RSN), and the fact that it isn't a MS/Intel standard.
  • by hummassa ( 157160 ) on Friday September 17, 2004 @02:04PM (#10278612) Homepage Journal
    It's really difficult to do such down here. To change the Constitution is kind of hard. We have a lawsuit called ADI ("Ação direta de inconstitucionalidade" -- inconstitutionality direct strike) that can be entered directly in our Supreme Court by any of our 30+ political parties, by our General Independent Counsel, or by any interested party (me for instance), and has been used a lot to strike unconstitutional laws passed by our Congress.

    But beyond that, our current political climate is pro-FreeSoftware, anti-USofAn-monopolies, anti-MS, very, very strongly. The country and the politicians (mostly) agree with Peru's Congressman Edgar Villanueva (see here [gnu.org.pe]) arguments in favor of Free Software as a mean to save money in dollars that escape our borders when they go to MS, as a mean to protect our national security because we don't know the possible backdoors in proprietary-closed-sourced-software, as a mean to generate jobs in services, as a mean to generate know-how inside the country, etc.

    And, on top of it, many many techs like me are ready to get "in arms" in the case DMCA-shit/Software-patenting-shit creeps into our legislation -- we're watching it!
  • Cringely topic (Score:3, Interesting)

    by eddeye ( 85134 ) on Friday September 17, 2004 @02:06PM (#10278639)
    Cringely walks a very thin line between troll and pundit. The only divider is that line at the top of your browser which says "pbs.org". Can we get a Cringely topic in the prefs? His columns appear here with some frequency.
  • by flabbergasted ( 518911 ) on Friday September 17, 2004 @02:07PM (#10278647)

    Extrapolating from your limited experience to the rest of the world is fun and easy! You too can make ignorant comments regarding things you know nothing about!

    I work at a place where signing hard drives in and out of safes when you want to boot a computer is a standard procedure. Visiting other businesses is just as cumbersome. Just try and visit Lockheed or Boeing or a military base. Cell phones, USB memory sticks and (frequently) laptops are held at the lobby or the security office.

    I went to a meeting a month or two ago with my laptop. We were all sitting around working with our individual machines around a table. Someone wanted a file from me, so I went to burn it to a CD for them. The host company had conveniently provided a stack of blank CDs for our use.

    I pulled a disk off the top of the stack and popped it in my drive. It turned out to have data on it already. I said this out loud and everyone in the room froze. Fortunately, the data was innocuous, so I got to keep my hard drive. But for a moment there, I faced the real possibility of having my drive confiscated and either classified or destroyed.

  • Yikes. (Score:3, Interesting)

    by Enahs ( 1606 ) on Friday September 17, 2004 @02:13PM (#10278715) Journal
    I'm sitting here at work, posting a comment on Slashdot, and as I type this, a Lexar JumpDrive is plugged into my keyboard.

    To think that at some companies there is at least one immediate-termination violation here is frightening. My company seems to love the fact that I take stuff home; as an hourly employee, I don't get paid for the work I do at home! ;-D
  • by Anonymous Coward on Friday September 17, 2004 @02:16PM (#10278758)
    I'm a Republican and I'm not a millionaire. I'm pro-gun and pro-life. That's two reasons to vote Republican. I also want lower taxes and smaller government.

    I fit your description exactly, but came to a different conclusion.

    In my mind, Bush turned the Repbulican Party away from the small-government principals it used to stand for, and into the party of "claim the oil in the mideast", "let China and Europe lead in stem cell research", and very very big government. That, and the fact that Bush is an irrational war-monger who goes around killing the wrong people (hint, his buddies the saudis were more closely related to 9/11 than iraq ever was) prevent me for ever voting for Bush.

    After seeing the Clinton surpluses and the Bush deficit it seems that the parties flipflopped on fiscal responisibility for the country.

    However for other reasons I can't bring myself to vote for a democrat, and especially a big-government democrat like Kerry.

    So I'm voting Libertarian, and hoping Bush will lose just to drive the Republican party back to it's original small government principals which I agreed with.

  • by Doc Ruby ( 173196 ) on Friday September 17, 2004 @02:20PM (#10278797) Homepage Journal
    In the USA, any action by a person or a court can be argued before a court, and liability shown if the action is prohibited by the constitution. Any law applied to a person in a court can be argued to be unconstitutional, in which case the accused person is free of liability, the court usually assigns changes in the unconstitutional procedure, and future attempts to apply the law are much easier to argue against, by citing that decision. Laws must all be consistent with the Constitution, which is the basis for all laws in the USA. That determination is the sole function of the Supreme Court, decisions of which are the "highest law in the land".

    Moreover, the USA has a legal principle called "jury nullification". Most accusations of crime can be argued before a jury of people, overseen by a judge. The jury decides the guilt of the accused. In the event that a jury decides the accused has broken the law, but that the law is unjust, the jury can find the accused "not guilty", and nullify the law, which is a less-strong precedent if it is cited in later defenses. The nullification is independent of any "constitutionality", which can be decided only by judges in high courts.

    But that's just the law, and the legal principles. American justice is a game, a vast complex one, highly circumstantial and procedural. Juries are usually never instructed about their option to nullify, and recently such instruction from defense lawyers has even been prohibited by some judges. And until a substantial case has been brought through a succession of lower courts to the Supreme Court (or just below it), its constitutionality is not evaluated. So if it the case doesn't make it, perhaps through success on grounds other than unconstitutionality, such an additional finding about the law (in addition to the accused's guilt) is never explicit.

    It's difficult, time consuming, expensive and risky to pursue the unconstitutionality of a law, so it rarely happens. Only the lawyers always win the game of American justice.
  • Re:Not a chance (Score:5, Interesting)

    by ConceptJunkie ( 24823 ) on Friday September 17, 2004 @02:29PM (#10278908) Homepage Journal
    No you're not. I'm actually a Windows developer. I'm just absolutely sick of Microsoft talking a good game but not backing it up.

    Just like a presidential candidate, MS has been promising to take security seriously for about 4 years now and yet, nothing ever seems to get better. Candidates make all kinds of bold promises, knowing full well that when it comes time to deliver, excuses can easily be made. Bugs get fixed reasonably well, but the rate new exploits show up has, if anything, increased. Linux is real competition, but MS's main strategy seems to be FUD and flexing their monopoly (see the USB story today).

    I often spend more time trying to get MS software to work than I spend writing my own code from scratch, so if I troll against MS now and again, it's for reasons like that.

  • Jaded Overreaction? (Score:3, Interesting)

    by TiggertheMad ( 556308 ) on Friday September 17, 2004 @02:34PM (#10278949) Journal
    I read the story, but my take on it is this: It's jaded overreaction. My arguments:

    Microsoft has historically bent over backwards to make their software backwards compatable. You can run all sorts of outdated hardware on the Windows OS. The only reason that current versions of Windows won't install on a 386 (via software lockout) is because MS doesn't want your computing experience to be ruined because of hardware issues. ("Hey, W2003 is crappy because it runs too slow on this 386!")

    Think about it, you still can run crusty old 16 bit apps on windows. Unless they had pressure from customers, why not do away with them, amd make people use software that would be more stable in a modern OS? So, my first point is, MS would get real heat if the tried to aggressively obsolete things. (gad-I just verbs a noun again.)

    Second, don't forget that MS lives under the shaddow of the DoJ case. While they got off with a wrist slap, no sane manager at MS (Yes, I know...) is going to suggest a course of action that causes them to tangle with anti-trust issues again. BG has stepped down as #1 cheese. Why would he do that? Because he wants to get back to working with coders? Or, because his leadership style was percieved as too agressive? That is a pretty big step to take unless you REALLY have an issue with leadership.

    While MS would like LINUX to go away, they aren't about to do anything that could get them into another round of lawsuits. Litagation is expensive and risky, even to Bill. Most companies with an ounce of brainmatter use it only as a last resort.

    The big C writes some interesting stuff, but this strikes me as a little too reactionary. The sky isn't falling on LINUX (yet).
  • by gphinch ( 722686 ) on Friday September 17, 2004 @02:42PM (#10279043) Homepage
    Well making laws to say you can't do something means nobody can ever do it (legally). Passing laws that say you CAN do something doesn't force you to do it. Confusing the two is simply an example of how ignorant most conservatives are.
  • Re:Not a chance (Score:5, Interesting)

    by Baseclass ( 785652 ) on Friday September 17, 2004 @02:50PM (#10279137)
    Yes, Microsoft has done the impossible. I've always told my family and friends that it wasn't possible for image files to maliciously damage their PCs.

    I stand corrected however. Kudos to Microsoft.

  • by kantai ( 719870 ) <kantai@gmail.com> on Friday September 17, 2004 @03:22PM (#10279430)
    Sure, you can run all the free software in the world on your OpenBIOS computer. You will not be able to watch media, listen to media, surf the net, etc, because everything will require a "trusted" computer.

    There could also be a free internet or free media. Why not?
    Yeah, it's paranoid, yeah it's probably unlikely, but this is where we are headed whether we like it or not.

    What? You just said it was unlikely, then you said it was the way were heading.

    Regardless, you're assuming the general public is much more sheepish than they actually are. Do you really believe that average joe user is going to put up with this? It's not like this is going to just happen unnoticed. It'll happen, and the public will through a huge shit fit.
  • by Anonymous Coward on Friday September 17, 2004 @03:51PM (#10279742)
    The problem is once this happens, musicians will have to get "distribution" licenses from MS. This means MS will technically become a record label. With such a license your music won't play on other computers so you won't be able to distribute your music. Even if you distribute it FREE, because it'll cost MONEY to GIVE AWAY your music.

    Yay for the free market! Nuke Microsoft before it's too late.
  • Whatever... (Score:2, Interesting)

    by jo42 ( 227475 ) on Friday September 17, 2004 @04:05PM (#10279877) Homepage

    So we stop using Universal Stupid Bus devices and go back to Firewire.

    Carry on, nothing to be see here you insensitive clod.

  • by Alsee ( 515537 ) on Friday September 17, 2004 @06:08PM (#10280864) Homepage
    I somehow doubt that manufacturers will gladly adopt this standard.

    Really? I suggest you try to find a soundcard that isn't Secure Audio Path (SAP) compliant. Practically none of then advertize that fact because SAP is an anti-consumer intentioanlly crippling of the soundcard, however every Windows Compatible soundcard has it. They all have it simply because Microsoft announced that they HAD to have it to be Windows Compatible. If you try to play certain flagged WindowsMedia format files Windows will pop up an error message and refuse to play the file unless the soundcard is SAP compliant. Anyone who attempts to complain about the problem to Microsoft will simply be told that the problem is that their incompatible soundcard.

    It just isn't possible to survive in the PC hardware market if your product doesn't work with Windows. How many people will buy a USB-product that doesn't work when you plug it into a Windows PC? How many support calls and returns would they get when the product doesn't work and Window pops up a message saying there is something wrong with the product?

    Every BIOS maker is making a Trusted Computing BIOS simply because Microsoft dictated that only a Trusted Computing BIOS will be fully compatible with the next version of Windows. The expectation is that Trust chips will be standard on ALL motherboards in a few months simply because Microsoft dictated that only a Trusted compatible motherboard will be fully compatible with the next version of Windows.

    Microsoft now has the power to dictate virtually any hardware they like because any manufacturer who does not comply will be driven out of the business by those competititors that do comply and have their hardware shipped with every new Windows PC.

    -
  • by dbIII ( 701233 ) on Saturday September 18, 2004 @02:37AM (#10283496)
    Is it conceivable that they could have added these features in such a way that didn't make USB incompatible?
    You are talking about the company that couldn't even get "ping" right after they were handed the source code for it from Berkeley, with surprisingly nasty consequences. They aren't very big on standards and compatability - others are supposed to work with whatever MS decides to do (eg. other companies had to patch their server OS so a badly configured ping client couldn't take them off the net).
    in a perfect world, they would be doing that by offering a better product
    Microsoft have never operated that way, and as a consequence have a huge market share. They sell a good enough OS and good enough word processing software that runs on very cheap computers. Cheap and nasty machines can work as low volume servers, and a lot of the time it does the job, so everyone bought or stole a MS OS. The problem MS has with linux, *BSD etc is that they run on the same cheap hardware, which gets rid of a major advantage of using their products in the first place.

    Microsoft is not in the business of offering a better product, that has always been what IBM, DEC, Honeywell, Sun and Apple have tried to do. The cost difference has meant, as an example, that if you are publishing books only those that do the typesetting have historicaly used Apples, while everyone else uses a PC with as old a version of MS operating system they can get away with.

  • by Sun Rider ( 623563 ) on Saturday September 18, 2004 @11:52AM (#10284911)
    The past is Europe, the present, USA, the future, Asia. If China doesn't want to be tied by Microsoft, they won't. With a simple wave of their hand.

"A car is just a big purse on wheels." -- Johanna Reynolds

Working...