LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   General (https://www.linuxquestions.org/questions/general-10/)
-   -   Russian Hack of the US Gov't -- Specific concerns? (https://www.linuxquestions.org/questions/general-10/russian-hack-of-the-us-govt-specific-concerns-4175687880/)

TorC 01-02-2021 11:25 AM

Russian Hack of the US Gov't -- Specific concerns?
 
Addressed to those who may know more than the average regarding such: what do you see as major potential threats to everyday life of a US citizen by the breach?

Please be as specific as possible -- not just, "National Security," but how it may affect private US citizens, public corporations, educational institutions, and local, state and federal govenmental agencies, to name but a few?

The latest from NY Times --

As Understanding of Russian Hacking Grows, So Does Alarm

My specific concerns center on transportation -- railroad and shipping disruptions -- ultimately affecting agriculture and food supplies and prices. Yours?

fatmac 01-02-2021 01:26 PM

Most essential services are run by computers, think water, electricity, gas, petroleum, basically anything your government may have a hand in, not just your nuclear arsenal.

Hermani 01-02-2021 01:50 PM

A few weeks ago the IT system of my municipality was hacked and all data was lost because ransomware was installed and did its bit. ALL information was lost: official records, permits, personal data of all residents, all data regarding social assistance benefits, e-mail, just everything.

They got a clue that something was wrong only when on a Tuesday morning they could not login anymore because all accounts were lost as well.

The mayor had to announce a couple of days later that the situation was "grave" because not only all data was lost, all backups were lost as well because they did not have an isolated backup server (as is mandated). I haven't heard back from my local representative yet and although officially the council denies it I am afraid that they paid at least some of the € 750k that the hackers supposedly asked. Anyway, we will find out in the long run.

The disruption this caused is significant and poses a significant breach in our local community.

fatmac 01-03-2021 04:58 AM

Back ups should be done at least daily, & kept off site for reasons such as this, that is why it is so important that IT infrastructure is not under people who know nothing about it.

hazel 01-03-2021 05:30 AM

These criminals (who don't have the skills of real hackers so I won't call them that) only get into servers because the people who run them are idiots. Hermani's story is par for the course.

Do you remember when TalkTalk was hacked and its customers' personal details were stolen? A company spokeswoman was asked at a press conference whether the stolen data was at least encrypted and she didn't know! And that's supposed to be a tech firm.

That btw is why I don't buy stuff online. Even though the channel is encrypted by tls, I don't trust the people at the other end to keep my details safe afterwards.

Turbocapitalist 01-03-2021 05:45 AM

Yes, those servers were run by idiots.

Quote:

Originally Posted by Hermani (Post 6203101)
They got a clue that something was wrong only when on a Tuesday morning they could not login anymore because all accounts were lost as well.

While it is bad that the public was adversely affected by the very bad decisions of others in management, and I feel bad for them, the clues are usually shown months or years in advance. Somewhere in all the paper records there is going to be a trail that leads straight back to the culpable parties who can then be brought to court: those managers who insisted on deploying the M$ products within the production infrastructure.

Computers are serious business and have always neen. It is not a game. So if your main activity is not playing video games, then M$ Windows has no business being on the computers. I can't see any municipalities having the right to claim video games as a core activity to the extent that a strong excuse for M$ product can be rationalized.

From the scope of the damage it sounds like the municipality was tricked into playing Windows on the server end too. If that was the case then the courts, and the public, should not show the slightest mercy to the managers who came up with the idea to try M$ product in production. Had they run FreeBSD or GNU/Linux on the servers they could have had the storage in an OpenZFS array with frequent snapshots. The snapshots would have enabled a roll-back to the last-known-good data set even if the desktops connecting to them got destroyed. Or for that matter, the snapshots would still work even if the latest files on the fileserver got encrypted by the attackers.

The attackers have certainly committed a crime but they did not get away with it alone. They have help on the inside from managers who set up the situation and kept it available for the attackers to exploit. If some managers of a building had blocked the installation of sprinklers and smoke detectors and then piled up storage in front of the fire exits and people died in a fire, there would be prosecution. This is the digital equivalent.

hazel 01-03-2021 05:49 AM

Excuse me but how do you know they were using Windows? I don't think Hermani said so.

Turbocapitalist 01-03-2021 05:57 AM

Quote:

Originally Posted by hazel (Post 6203365)
Excuse me but how do you know they were using Windows? I don't think Hermani said so.

The ransomware name was not given by him. However, you have 1) the absence of howling to the heavens in the press about "Linux" and the observation that 2) all previous ransomware has been Windows-based.

In every case of the hundred or so ransomware cases I have read about during the last year or so where the name of the ransomware has been given, it has come down to getting nailed by Windows total cost of ownership. So if more information is given, we can see the name of the malware and read up on which CVEs it depends on.

Too many serious activities depend on reliable computing for a gaming system to be tolerated. If there is a M$ presence in the infrastructure, it is not a technical matter but one of staffing and of management in particular.

ondoho 01-03-2021 06:10 AM

Quote:

Originally Posted by hazel (Post 6203358)
These criminals (who don't have the skills of real hackers so I won't call them that) only get into servers because the people who run them are idiots.

Oh, they are definitely skilled.
Underestimating Russian cyber intelligence like that is dangerously naive.
Thinking that only the Russians do that (of all large, rich and developed countries) is also dangerously naive.

But I don't subscribe to the OP's alarmistic tone either.

enorbet 01-03-2021 06:46 AM

Well Turbocapitalist I am very interested in exactly why you seem to think gaming is a critical condition for security or the lack of it. IMHO there are several large attack surfaces provided by Windows but none of them have anything to do with gaming. M$ has tried to improve security by limiting even Admin account privileges, but the simple fact is the Registry is all the eggs in one basket. Get in there and everything is owned. I don't see how games are relevant to that at all.

Turbocapitalist 01-03-2021 06:55 AM

Games are not relevant. That is a key point. Windows is a gaming OS and does not belong out in either industry or the public sector.

teckk 01-03-2021 06:55 AM

There are 3 ranges of IP's, that whois says are in St Petersburg and Moscow, that have been hitting my firewalls, with port scans and ssh, 24 hours a day, 2 to 3 times a minute, for 4 or 5 months now. There is another one in Nuernburg Germany, that has been doing the same.

"They" are doing their best to map the internet. "They" understand the age that we live in, and want all the info on "us" that they can get.

I don't understand why the ISP's, who have to see those constant packets from the same IP range for months, don't block that range.

I know several people that have most of Russia blocked at the firewalls. That means that all legitimate traffic gets blocked too.

teckk 01-03-2021 07:08 AM

This one has been running for months
https://www.abuseipdb.com/check/45.129.33.185

Others
https://www.abuseipdb.com/check/87.251.74.189
https://www.abuseipdb.com/check/194.26.25.124
https://www.abuseipdb.com/check/193.27.228.20

TorC 01-03-2021 08:12 AM

Quote:

Originally Posted by ondoho (Post 6203373)
Oh, they are definitely skilled.
. . .
Thinking that only the Russians do that (of all large, rich and developed countries) is also dangerously naive.

But I don't subscribe to the OP's alarmistic tone either.


a) Okay -- the Chinese and who else, in your opinion?
b) The NYT is alarmist? Perhaps. But is the threat real?

+1 @Turbocapitalist re: M$
+1 @teckk for solid info

jsbjsb001 01-03-2021 10:07 AM

TorC, you might consider that nearly every country (and every developed country) has something called "intelligence agencies" who don't just use "human intelligence" (HUMINT) to gather intelligence. There is also something called "signals intelligence" (SIGINT), among other forms of intelligence gathering methods.

You really think the NSA bakes cupcakes? No, they gather signals intelligence (SIGINT), the same as the DSD (Australian Signals Directorate) do where I live. The same as the Russians have their intelligence agencies for all of the above. The reality is that they are all in it up to their necks.

Time to step into the real world TorC... free internet? :laughing:

hazel 01-03-2021 10:30 AM

One of the things Snowden revealed was that the NSA routinely spy on their "allies" as well as on their enemies. Anything that goes through an American server. They even hacked Angela Merkel's email!

jsbjsb001 01-03-2021 10:34 AM

Quote:

Originally Posted by hazel (Post 6203453)
One of the things Snowden revealed was that the NSA routinely spy on their "allies" as well as on their enemies. Anything that goes through an American server. They even hacked Angela Merkel's email!

Yep, ally, enemies... welcome to the real world hey! Very believable.

They also spy on their own love interests too from what I've read. I mean the love interests of the NSA agents themselves, I believe they call it some thing like LOVEINT or something similar. As in, the NSA themselves do that, not just another country's intelligence agencies.

TorC 01-03-2021 10:38 AM

Quote:

Originally Posted by jsbjsb001 (Post 6203445)
. . .

You really think the NSA bakes cupcakes? No, they gather signals intelligence (SIGINT), the same as the DSD (Australian Signals Directorate) do where I live. The same as the Russians have their intelligence agencies for all of the above. The reality is that they are all in it up to their necks.

Time to step into the real world TorC... free internet? :laughing:




You're assuming to know where I am coming from and what I do or do not know. How prescient of you, jsbjsb01! Perhaps the 02 version took cues from the 01 version of jsbjsb?



Just looking for intelligent replies to add to my ignorance, thank you.



Please continue, non-trolls!

jsbjsb001 01-03-2021 10:44 AM

Quote:

Originally Posted by TorC (Post 6203456)
You're assuming to know where I am coming from and what I do or do not know. How prescient of you, jsbjsb01! Perhaps the 02 version took cues from the 01 version of jsbjsb?
Just looking for intelligent replies to add to my ignorance, thank you.
Please continue, non-trolls!

Grow up TorC.

It's not hard to know where you come from if you put it in your Location field of your user profile, ie. "Location: Southern Rockies".

https://en.wikipedia.org/wiki/Southern_Rocky_Mountains

BTW, exactly where was I wrong in what I said before ?

PS: At least you admit that you're "ignorant", I'll give you that.

enorbet 01-03-2021 11:14 AM

Quote:

Originally Posted by Turbocapitalist (Post 6203382)
Games are not relevant. That is a key point. Windows is a gaming OS and does not belong out in either industry or the public sector.

Just to be clear I despise Microsoft and in no way am I buying the whole "kinder, gentler" crap... BUT, to call Windows "a gaming OS" IMHO is just narrow-minded, inaccurate and silly. ALL operating systems play games and all operating systems, with the exception of unmodified console systems and other "embeddeds", do other work besides play games. So how and why does any one OpSys get to be "a gaming os"? IMHO this is a feeble attempt to discredit Windows and it's feeble because it's non-specific when there are actual specifcs available to properly and deservedly discredit Windows!, starting right from the jump with that incredibly invasive Win10 EULA and the ability to "phone home" on unsecured wifi connections, side-stepping even an encrypted file system and that's just for openers !

hazel 01-03-2021 11:46 AM

Quote:

Originally Posted by enorbet (Post 6203467)
So how and why does any one OpSys get to be "a gaming os"?

I think the point being made is that most games were written to play on Windows, more still play on Windows than on any other OS, and many play only on Windows. So the best reason anyone might have to use Windows is that he wants to play games that aren't playable on Linux.

Turbocapitalist probably meant that he can't think of any other reason why someone should install Windows on any computer, so why put it on a server?

Hermani 01-03-2021 01:37 PM

Quote:

Originally Posted by hazel (Post 6203365)
Excuse me but how do you know they were using Windows? I don't think Hermani said so.

Actually, they were using Windows. I know because I have seen them use the system when I was handing in the candidate list for my party at the last local elections.

The one responsible is our mayor so any responsability will be a political thing. There sure is blame, the local council is mandated to have an isolated and adequate backup - and they did not have that. Would they have had it, we would only have had some message about "a small interruption of service".

Right now our mayor is nominated as "best governmental administrator of 2020" - I doubt whether she would accept it :rolleyes:

And they did not make it too difficult for the attackers. They did have remote access but from what I heard from two councilors it wasn't secured with two-factor authentication. I guess one keylogger on a strategic place would definitely provide quick access to the whole system.

And I really don't get it. Even at home I have an isolated backup server.

JSB 01-03-2021 02:02 PM

I know there are lot of good coders and software developers in Russia. Not only troll factory. They work for company, but also for government. Cyber spying. I think the same as in USA.
It is a problem but maybe Russia dont want to destroy USA, and USA dont want to destroy Russia.

ondoho 01-03-2021 03:17 PM

Quote:

Originally Posted by TorC (Post 6203408)
Okay -- the Chinese and who else, in your opinion?

Well what other large, rich and developed countries are there besides Russia and China?
Quote:

Originally Posted by TorC (Post 6203408)
The NYT is alarmist?

That's not what I said. I said your post's tone is.
And I looked at the article. It seems mostly concerned with how badly US government network intrusion detection failed - probably as a result of 4 years of incompetence governing - and how they need to fix it.
Voicing "specific concerns (...) on transportation -- railroad and shipping disruptions -- ultimately affecting agriculture and food supplies and prices" means letting your emotions & fantasy run lose with the facts offered by the article.

...

OK, part of that article is alarmist.
I don't like how this paragraph is phrased:
Quote:

The intentions behind the attack remain shrouded. But with a new administration taking office in three weeks, some analysts say the Russians may be trying to shake Washington’s confidence in the security of its communications and demonstrate their cyberarsenal to gain leverage against President-elect Joseph R. Biden Jr. before nuclear arms talks.

“We still don’t know what Russia’s strategic objectives were,” said Suzanne Spaulding, who was the senior cyberofficial at the Homeland Security Department during the Obama administration. “But we should be concerned that part of this may go beyond reconnaissance. Their goal may be to put themselves in a position to have leverage over the new administration, like holding a gun to our head to deter us from acting to counter Putin.”
If you don't read carefully, "nuclear arms talks" can quickly turn into just "nuclear arms", followed by more scary verbiage: "beyond reconnaissance", "gun to our head"... That is fearmongering IMO.

Hermani 01-03-2021 04:20 PM

Quote:

Originally Posted by ondoho (Post 6203586)
If you don't read carefully, "nuclear arms talks" can quickly turn into just "nuclear arms", followed by more scary verbiage: "beyond reconnaissance", "gun to our head"... That is fearmongering IMO.

I am still a NY Times subscriber but I have my doubts. From time to time they provide quality journalism, however
  1. in the case of online censorship, while the enemy of democracy, they actually seem to condone this practice. There are always hoaxes and there is always fake news. You really need to trust the majority of people to think for themselves and try to convince them of your beliefs. If one tries to persuade people by suppressing other opinions you are doing democracy a disservice and in the end, yourself as well.
  2. And for the whole BLM thing: although I can appreciate that some people are still mistreated due to their physical appearance and everybody should actively try to stop that, they really should stop raking up this thing and even use a capital B when describing a specific group of people. The best thing to get this over with is to stop pointing at skin color to be a differentiator. In my team of 13 we have to people who are obviously not originating from Europe. However we have never talked about this when doing their job interview, it just was no issue. And it still isn't. And it will never be. And I even feel bad describing this, because they are my colleagues and they are just as dear to me as any other colleague. In contrast at one time on the NY Times online front page HALF of the stories was about this.

enorbet 01-03-2021 10:38 PM

Quote:

Originally Posted by hazel (Post 6203483)
I think the point being made is that most games were written to play on Windows, more still play on Windows than on any other OS, and many play only on Windows. So the best reason anyone might have to use Windows is that he wants to play games that aren't playable on Linux.

Turbocapitalist probably meant that he can't think of any other reason why someone should install Windows on any computer, so why put it on a server?

Maybe. However some very large percentage of games also run on Apple computers even without WINE and WINE plus Vulkan fills in a HUGE percentage of any "stragglers". The business of gaming has exceeded the business of Hollywood for around a decade so even phones not only play games but have some written especially for them. My point is that different operating systems appeal to different niche markets and the appeal of Windows didn't start with nor continue with only gaming as it's "Ace in the hole" or raison d'etre.

The reason that Windows still holds somewhere in the vicinity of 90% of Desktop users is it's appliance nature. Users don't have to be bothered by those pesky nuts 'n bolts, and the support and applications that MS maneuvered into being all but essential like MS Office and of course a sprinkling of killing off most of their rivals.

AFAIK almost all motor vehicles of the masses come with radios or some sort of music playing system and calling Windows "a gaming os" is as meaningless, in my mind, as saying Volkswagon is a music vehicle and for that reason unworthy of being called a serious automobile. Furthermore I find the reference using gaming as trivial biased and mistaken.

Games are used in medicine to train micro surgeons and by the military to train soldiers brains in strategy and teamwork as well as in equipment tutorials just to mention a few serious applications. Perhaps most importantly Gaming is the main reason by far that your PC, all our PCs, are as powerful and cheap as they presently are. Nothing else has even come close to providing the impetus and money fueling hardware and software development that games have. This is indisputable. It's History. So I see naming Windows "a gaming os" just wrong on several levels. One might just as well call it or any OS a "Chat OS" at least back in the day of AOL.

There are Drivers and there are Mechanics with some overlap but the vast majority of Drivers are not also Mechanics. A similar pattern is the reason for Windows. I happen to agree that it is at least a bit careless to use an OpSys that has always been plagued by real security issues and while some improved still is that way, in Mission Critical situations but it is not because of gaming.

Hazel, in another thread you and I both pay some attention to, the Faith and Religion thread, there are several non-believers and non-Christians who blame Christianity or even Religion as a whole for past violence like the Inquisition and Honor Killing. I think that is mistaken, that Religion has sometimes provided false justification for People who would have been violent and intolerant regardless but the Prime Mover is the people so inclined, not their beliefs they use as justification.

They would've found something to justify such horrid behaviour just as the Nazis and others used "survival of the fittest" as justification for genocide. That genocide and mass murder has existed since time immemorial is at the core, not belief systems adopting dogma that can be promoted or twisted as support for such a nature. To focus on the possibly apparent commonality is like curing the symptom instead of the cause.

ondoho 01-04-2021 05:12 AM

Quote:

Originally Posted by Hermani (Post 6203607)
And for the whole BLM thing: although I can appreciate that some people are still mistreated due to their physical appearance and everybody should actively try to stop that, they really should stop raking up this thing and even use a capital B when describing a specific group of people. The best thing to get this over with is to stop pointing at skin color to be a differentiator. In my team of 13 we have to people who are obviously not originating from Europe. However we have never talked about this when doing their job interview, it just was no issue. And it still isn't. And it will never be. And I even feel bad describing this, because they are my colleagues and they are just as dear to me as any other colleague. In contrast at one time on the NY Times online front page HALF of the stories was about this.

Being black in the US of NA is very, very different from being black in NL.
I won't say more about it, not to take this thread OT.
But if you or anyone want to continue the discussion, let's do it elsewhere - separate topic, or maybe here.

Turbocapitalist 01-04-2021 05:30 AM

Quote:

Originally Posted by hazel (Post 6203483)
I think the point being made is that most games were written to play on Windows, more still play on Windows than on any other OS, and many play only on Windows. So the best reason anyone might have to use Windows is that he wants to play games that aren't playable on Linux.

Turbocapitalist probably meant that he can't think of any other reason why someone should install Windows on any computer, so why put it on a server?

Indeed. When I talk to people about their home systems, if they are still on Windows then the official excuse given is almost always some big name title being Windows-only which the home's main Windows support person plays heavily. In such cases it is always some specific, triple-A game which is named as the excuse for keeping the whole household on 1980s technology despite there being better platforms for games. There is no excuse to run Windows on a server, and only feeble ones for the desktop.

Quote:

Originally Posted by Hermani (Post 6203537)
Actually, they were using Windows. I know because I have seen them use the system when I was handing in the candidate list for my party at the last local elections.

The one responsible is our mayor so any responsability will be a political thing. There sure is blame, the local council is mandated to have an isolated and adequate backup - and they did not have that. Would they have had it, we would only have had some message about "a small interruption of service".

Yes, M$ is already a political matter, it begin a cult and all, and involvement with a politician of that stature will ensure that all technical points are deflected. However, that should not become a vehicle to absolve him of the inherent wrongness of using M$ products in production, especially on servers. Again, see the earlier comment about server-side snapshots.

As for the SolarWinds crack, that just goes in the file of case studies for why proprietary software is unsuitable for both the public and private sectors. The presence of M$ is not a technical problem, it is merely a symptom of staffing problems. The attribution of an attack to any particular government is merely a distraction from the need to eliminate the staff who have pushed M$ products into critical infrastructure, and the managers which put them up to it.

enorbet 01-04-2021 08:54 AM

Turbocapitalist, last year MS revenues hit an all-time high of just shy of 150 TRILLION US DOLLARS! (what's a measly $7 trillion ;) ;) ?)... in one year. Take a moment and let that really sink in. That is immensely powerful, beyond comprehension really. There are 213 global nations and Microsoft, one corporation, had greater revenue in one year than over 175 of those entire nations.

What percentage of that do you suppose was Games vs/ Office? Remember, MS wisely (and ruthlessly) pursued getting Word, Excel, etc. the required standard in schools as low as Elementary School. We have to "give the Devil his due" or we risk underestimating the enemy. Even if I misunderstand your conclusions, such claims that single out any one aspect like games, run exactly that risk. Windows and Microsoft is far more than just Games and I seriously think you should reconsider. Just because who you've talked to or read about claims games are the reason is anecdotal at best and "has blinders on" toward the true scale that MS operates on.

hazel 01-04-2021 09:00 AM

Bill Gates always said that his aim was a computer on every desktop and Windows running on all of them!

teckk 01-04-2021 09:04 AM

I think that you have some zeros in the wrong place.
https://www.macrotrends.net/stocks/c...t/gross-profit
https://www.microsoft.com/investor/r...r19/index.html
https://finance.yahoo.com/quote/MSFT...DkUUM12fvAuS11

enorbet 01-04-2021 09:04 AM

Quote:

Originally Posted by hazel (Post 6203857)
Bill Gates always said that his aim was a computer on every desktop and Windows running on all of them!

He even said, "If anyone steals an operating system, I want it to be ours".

hazel 01-04-2021 09:11 AM

Quote:

Originally Posted by enorbet (Post 6203860)
He even said, "If anyone steals an operating system, I want it to be ours".

There's a widespread belief that Microsoft tacitly encouraged the widespread piracy of Windows in China and elsewhere because it got people hooked on the system. I don't know how much truth there is in that.

Of course there is also the fact that every computer you buy on the high street has Windows on it. Most people have never used anything else. It's a bit like the qwerty keyboard, which was invented originally to slow down typing so that the typewriter keys didn't get entangled. Now it's just a pain but nobody can use anything else because no one has any idea where the keys are if they're not where qwerty puts them.

Turbocapitalist 01-04-2021 09:12 AM

The annual revenue was "only" $147.114B for 2020, with their fiscal year ending 2020, if one accepts Enron-style accounting. Their OEM monopoly is slipping and so is their monopoly on productivity suite formats, to the point that they've probably lost their main money-maker, the monopoly rents on the two. They've moved much of their activities under the wing of Azure and yet have had several rounds of mass-firings last year with thousands of jobs with Azure getting the axe with each round. They also got a $2.4B handout this last summer from the US government, which might be the only real money they have.

However, you are right that one should not underestimate them. I would add to that the importance of not underestimating both the cult-like nature of the beast as well as the espionage potential that so many governments, big and small, cling to. Some would say that latter point is what has kept them afloat the last decade or two.

My complaint about Windows being a (rather poor) game system is that gaming is the only possible excuse for keeping such a system around. As most businesses and agencies do not play games, therefore there is zero rationale for keeping Windows around. As we see in the Netherlands' example mentioned a few posts earlier, those responsible for pushing M$ products into any public or private infrastructure did so on purpose and need to be brought to trial.

One risk with the SolarWinds exploit mentioned in the OP is that M$ gets away with trying further to be presented as both critical infrastructure and as synonmous with computing. It is neither and it is costing all of us any time it gets pushed into production and connected to the net, especially as it tries to keep one foot in the server market.

teckk 01-04-2021 11:22 AM

Quote:

As most businesses and agencies do not play games, therefore there is zero rationale for keeping Windows around.
Ya there is. One thing windows does well, is make a computer usable to the, uh, click on an icon and wait for something to happen crowd. And that is probably 90-95% of computer users in the US. We refer to that as "idiot proofing".

If it weren't for windows, and how it does everything but click the icon, the US would probably have to let go 60-70% of all office workers. That may be rude but it is also fact.

Some of those windows users could be made to learn what an IP address and route is, what html is, make a simple script to get thing done, how to edit a pdf, etc, without microsoft doing it for them. But most are too thick. You would have to fire them.

If your country is better, I am glad for you.

Plus, it comes on the machine from the factory. And a whole lot of MCSE's. They go to school for that.

hazel 01-04-2021 11:39 AM

Quote:

Originally Posted by teckk (Post 6203925)
If it weren't for windows, and how it does everything but click the icon, the US would probably have to let go 60-70% of all office workers. That may be rude but it is also fact.

If your country is better, I am glad for you.

You seem to have had bad experiences with office workers. I worked in a scientific library between 1976 and 1998. We had a mainframe computer and the interface was cli only. None of our office workers had any problems with that. They were used to keyboards; the main difference was that they had a vdu to look at rather than a sheet of paper and the text they typed was editable.

The input screen was all boxes (something like ncurses I suppose) and they typed into them. No problem there. But how did they learn to launch the input program? Simple. I told them that the computer had the equivalent of a switchboard operator. It was called the operating system. When you first logged in, you were talking to this operator and you gave the name of the program you wanted to talk to, just as you would when you rang up a company and got the switchboard. And you would be put through.

Maybe clericals in the US are dumber than our English ones.

Turbocapitalist 01-04-2021 11:45 AM

Quote:

Originally Posted by teckk (Post 6203925)
If it weren't for windows, and how it does everything but click the icon, the US would probably have to let go 60-70% of all office workers. That may be rude but it is also fact.
[...]

Plus, it comes on the machine from the factory.
[...]

Yep, that latter, that of an OEM monopoly, has been very problematic factor going back to the days of the illegial, per-processor fees. Mostly home users don't notice or care what is on the machine when it comes from the shop. Same for many office workers.

However, the part about bullshit jobs is an important point. M$ Windows is for empire builders who get off on head counts rather than getting products or services to market. The presence of M$ products in place of an infrastructure is also a key enabler of bullshit jobs. M$ is not about getting anything done, rather the opposite, and it spreads like a stain through businesses and agencies as staff who are evaluated on results are displaced by those who are evaluated on keeping a chair warm.

Incidents like the SolarWinds crack are just a side effect.

Hermani 01-04-2021 12:52 PM

Quote:

Originally Posted by ondoho (Post 6203794)
I won't say more about it, not to take this thread OT.

You're right.

Hermani 01-04-2021 01:04 PM

Quote:

Originally Posted by hazel (Post 6203864)
There's a widespread belief that Microsoft tacitly encouraged the widespread piracy of Windows in China and elsewhere because it got people hooked on the system. I don't know how much truth there is in that.

If Microsoft really would want to stop the piracy of their operating system there are a lot of technical ways they could have done that. They did not. Nowadays you can just download it and if you don't like to apply a simple crack and you want an official installation you can just buy a license key for € 5 at your local online gamekey discounter.

If they would not have kept this easy, maybe all China would now be running Red Flag Linux.

Turbocapitalist 01-04-2021 01:15 PM

Quote:

Originally Posted by Hermani (Post 6203954)
If Microsoft really would want to stop the piracy of their operating system [...]

Though people forget over time, that's never been part of their business model which has actually centered around the monopoly rents. The rents are where they made their money, 80% or so, not on the sale of software or services. So therefore maintaining the monopoly was paramount, even going back to the late 1990s:
Gates shed some light on his own hard-nosed business philosophy. "Although about 3 million computers get sold every year in China, but people don't pay for the software," he said. "Someday they will, though. As long as they are going to steal it, we want them to steal ours. They'll get sort of addicted, and then we'll somehow figure out how to collect sometime in the next decade."
-- https://www.cnet.com/news/gates-buffett-a-bit-bearish/
Thus their priority has been to promote "piracy" as means to inhibit an actual competition.

Quote:

Originally Posted by Hermani (Post 6203954)
If they would not have kept this easy, maybe all China would now be running Red Flag Linux.

Yep. You see what they did there.

enorbet 01-04-2021 02:34 PM

Quote:

Originally Posted by Turbocapitalist (Post 6203865)
The annual revenue was "only" $147.114B for 2020, with their fiscal year ending 2020, if one accepts Enron-style accounting.

Interesting. Maybe someone mistook a comma for a period/decimal point since https://csimarket.com/stocks/singleY...?code=MSFT&rev reports that number as "143,015. Million which I take as a 10^6 exponent. In either case it is one helluva lot of money/power. We agree on much. I just don't like the concept that gaming supports MS or is any reason to disqualify a server OpSys. Gaming is multimedia, pure and simple, without which modern advertising would not exist. My first GUI was IBM's OS/2 so I am fully aware of the cautious, love/hate relationship between business and multimedia. OS/2 had 4 x 8bit or 16bit games like Chess and Reversi in 1996 but had streaming video that same year. Lack of production tools for multimedia hurt them a lot. It was said that if IBM bought out a successful sushi company they would market it as "raw, dead fish". :D

boughtonp 01-04-2021 05:12 PM

Quote:

It was said that if IBM bought out a successful sushi company they would market it as "raw, dead fish".
(Aside: Sashimi is the raw fish. Sushi is a rice dish that may or not include fish, which may or not be raw.)


On the original topic, security researchers Bruce Schneier and Brian Krebs both have a number of blog articles on the subject, though neither of them is listing specific concerns.


igadoter 01-04-2021 09:26 PM

Russia is always good to unite Americans as common enemy. China is not such good. There are diversities. Biden promised "to heal nation" - seems one of ways of healing is rather traditional - to make Russia nation-wide enemy. I don't believe all this hacking at percentage was such disastrous as presented in USA media - due to Putin sarcastic congratulations to Russia intelligence - hey guys keep going good work. In really serious matter Putin keeps himself quiet. It is all laugh. Something like: look Americans are just idiots.

TorC 01-10-2021 11:34 AM

". . . Americans are just idiots" ?
 
Quote:

Originally Posted by igadoter (Post 6204073)
Russia is always good to unite Americans as common enemy. China is not such good. . . . Something like: look Americans are just idiots.

If by 'idiots' you mean Americans place convenience over even their own Freedom, @igadoter, then perhaps we can at least somewhat agree.



Please clarity, if you would.

teckk 01-10-2021 11:56 AM

Quote:

Something like: look Americans are just idiots.
I'm an American, and the rules of comedy are that you can make fun of your own kind.

https://m.youtube.com/watch?v=r9g0EYIUfX4

https://m.youtube.com/watch?v=6CdfsCz1oKo

https://m.youtube.com/watch?v=2-Be9f7Ovgg

enorbet 01-10-2021 12:03 PM

Quote:

Originally Posted by igadoter (Post 6204073)
Americans are just idiots.

What an incredibly ironic and idiotic statement. How can anyone possibly imagine that 332,000,000+ people anywhere have any one characteristic completely in common beyond physical basics like 2 eyes, 2 legs, etc? I'm reasonably convinced the Bell Curve actually applies everywhere. Just how many Americans have you actually met? Does the number constitute anything remotely useful as a statistical average?

boughtonp 01-10-2021 02:40 PM


 
Igadoter is not calling anyone idiots.

I recommend re-reading the whole post and not isolating words from their context.


TorC 01-10-2021 04:52 PM

@boughtonp is correct in that it seems @igadoter was trying to quote Putin in saying this/implying this/expressing this with body language -- a sentiment he, Putin, holds towards Americans, in general.

Okay LQers -- you're free to criticize Putin here should you think his feelings unwarranted.
Tell us why they may be unwarrranted, please!

jsbjsb001 01-11-2021 06:44 AM

Quote:

Originally Posted by TorC (Post 6206194)
@boughtonp is correct in that it seems @igadoter was trying to quote Putin in saying this/implying this/expressing this with body language -- a sentiment he, Putin, holds towards Americans, in general.

Okay LQers -- you're free to criticize Putin here should you think his feelings unwarranted.
Tell us why they may be unwarrranted, please!

It seems both yourself and enorbet are both living in the same nationalistic bubble and seem to think there is still such a thing as "the good guys" (aka. the US of A) and "the bad guys" (aka. the Russians). I'm sorry to be the one to have to tell you both, but that particular line is that blurred that it would be impossible for anyone to know which side of it they are really on, and that assumes that line even still exists. As I think you'll find that given how blurred it is, that particular line is blurred to the point of non-existence. The Russians would be rubbing their hands together thinking "mission accomplished" seeing how naive the average American is about this subject, not to mention the division in the US of A created as a result. On that particular point, igadoter is absolutely spot on in what they say in post #43.

There is also a reason why the NSA doesn't report all security related flaws it finds in M$ Windows to M$, and they've admitted this publicly themselves - they save the best flaws for themselves and don't report them to M$ to be fixed. I'll give you 10 points if you can guess why they don't... It's also not just by chance that the Chinese target M$ Windows when they hack my country's government networks (and NGO's for that matter), and it's because that's the very system the government and most NGO's here use. Can you therefore guess why they don't generally target Linux or some other *nix based system? Hint: I just told you the reason.

In all fairness, and as much as I dislike the poster who made post #9, the following quote is spot on:

Quote:

Originally Posted by ondoho (Post 6203373)
...Underestimating Russian cyber intelligence like that is dangerously naive.
Thinking that only the Russians do that (of all large, rich and developed countries) is also dangerously naive.
...

carry on...

enorbet 01-11-2021 08:19 AM

Quote:

Originally Posted by jsbjsb001 (Post 6206353)
It seems both yourself and enorbet are both living in the same nationalistic bubble and seem to think there is still such a thing as "the good guys" (aka. the US of A) and "the bad guys" (aka. the Russians). I'm sorry to be the one to have to tell you both, but that particular line is that blurred that it would be impossible for anyone to know which side of it they are really on, and that assumes that line even still exists. As I think you'll find that given how blurred it is, that particular line is blurred to the point of non-existence. The Russians would be rubbing their hands together thinking "mission accomplished" seeing how naive the average American is about this subject, not to mention the division in the US of A created as a result. On that particular point, igadoter is absolutely spot on in what they say in post #43.

I can only speak for myself but your assessment of my position is, I think, incorrect. I suffer no illusions that things are so simple that "The US == Good Guys" and "The Russians == Bad Guys" and that was exactly my point!. It is not valid, reasonable or at all wise to use such an incredibly broad brush to paint every individual among hundreds of millions as any one thing. People are just more diverse than that.

This is how I have always thought. My Father who fought in The Battle of the Bulge in WWII used to complain about things he didn't like saying "I fought for this country and this is what it's become?". He would use this even to complain about things like anti-racism and anti-war protests during the 60s and 70s. I would ask him how he defined "country" that he defended. What did he imagine "his country" was? Was it the land? the people, and if so which people were included and which excluded? or was it the laws and ideals that it's government aspired to?

I always contended that it was the ideals aspired to and that the balance between diversity of people was in fact the lifeblood of those ideals in free country. Every living person I've ever known considers themselves basically honest even though every living person I've ever met lies sometimes, even if it's just "itty bitty white ones" in their estimation. That doesn't imply Honesty is not a worthy ideal. The reality is, in my mind, "Where do you draw the line?" Under what conditions is lying acceptable? Do you actually have Overriding Principles or just wing it on whim?

In any case I am of the opinion that any infringement or limitation on Free Speech should be considered with the utmost concern as it is extremely dangerous and usually counterproductive to allow slippery precedents in the area of ideas. I am also alarmed that what almost everyone considers The Internet is in fact a "Walled Garden" on a scale AOL only imagined in a fever dream. However I am also of the opinion that much of this is because Computers are so new, and STILL extremely underestimated as to their impact on ALL humankind no matter what national borders you reside within.

TLDR - I don't think Russians (or any other large group of people) are evil, backwards, or stupid. I don't think the US is a Camelot full of people superior in morals, intellect, or character and I'm confidant there are those in US Govt. that daily work at exactly the sort of hacks recently exposed as originating with some Russians. It's literally business as usual.


All times are GMT -5. The time now is 08:46 AM.