If you’re an operating system, you find out in parody.
If you’re a Wall Street banker, you’ll have to settle for sarcasm.
Like “Coyote Ugly,” but actually ugly:
First…hackers busted into the website of the US Consolate General in Russia. As if the US didn’t have enough problems off shore…
“This latest attack highlights the fact that no organization is immune from infection, and that no matter what the size of the company, it must defend its webpages fully to avoid being stung.”
No doubt there – attacks on institutions are commonplace – it’s just that they have good PR teams to keep it hush hush.
Next…a German onion router administrator gets arrested. Clearly not the guy’s problem, but getting arrested highlights the risks of running a Tor server in this day and age (as well as the cluelessness of some politicians regarding technology). What’s Tor? Inquiring minds check here first.
The talk is directed at Bitlocker, the full disk encryption in Windows Vista, but it applies to all similar methodologies.
It’s simple. Fools don’t have physically secure, unencrypted backups. Fools think everything should run like lightning, regardless of the strain on the system. And, of course, fools lose passwords.
Doesn’t sound foolproof.
Might I suggest using virtual disk encryption, like that offered by PGP. It is slightly more cumbersome but puts less strain on the system and the “product” is portable – better design for fools (like me).
It may have been a good move to get some hardcore security guys involved in the development of Vista, but a lot of people are going to question why Microsoft looked to the NSA, which has been under fire recently for spying on people at the request of the Bush Administration.
Adding fuel to the upcoming fire…
The Redmond, Wash., software maker declined to be specific about the contributions the NSA made to secure the Windows operating system.
Then again, maybe the idea was to position the upcoming operating system to be used by political bloggers, and/or throw a bone to the 110th Congress…
The NSA also declined to be specific but said it used two groups — a “red team” and a “blue team” — to test Vista’s security. The red team, for instance, posed as “the determined, technically competent adversary” to disrupt, corrupt or steal information. “They pretend to be bad guys,” Sager said. The blue team helped Defense Department system administrators with Vista’s configuration .
So the “blue team” were the good guys.
I guess I’m wondering whether the only one that is going to turn out bad or good is the Microsoft PR Team, when the whole concept spins in or out of control.
UPDATE: Bruce Schneier asks: Is this a good idea or not?
It is the last day of 2006. What better time for predictions…
From the experts:
Happy New Year!
UPDATE: Sarcasm does work – someone is thinking about backup.
“I am shipping antivirus software for the platform anyway.” – Kapersky (another security company not worried about Vista security).
No wonder security firms were unconcerned about losing business as a result of Vista. I wonder why they aren’t keeping quiet and just going about their business too, unless they think they will get some favors in return. Will they?
UPDATE: No matter – Microsoft is still supremely confident.
The Free Software Foundation has launched a new site, BadVista, with a two-fold goal. The first is to beat the shit out of Microsoft Vista, and the second is expound upon the benefits of…what else…free software.
I love free software as much as the next guy, but I am not going to give this initiative the thumbs up. Sorry to say this, but It smells like a shill. Fine to beat up on Vista (everyone beats on Microsoft anyway), but don’t do it solely for the alternative promotion of your own cadre. If Vista sucks, let that sucking stand on its own – the FSF loses credibility otherwise.