[QCLUG] reason to never use windows
Brandon Griffis
brandongriffis@gmail.com
Mon, 15 Jan 2007 14:34:03 -0600
---------------------- multipart/alternative attachment
I don't mind a good conspiracy theory, but as they go this theory barely
qualifies as mediocre.
The only reason people ever tied this key to the NSA was that the key itself
was called _NSAKEY. Something M$ explained as meaning it met the standard
for not exporting high crypto.
Also, this isn't really a back door. It's a crypto security key. So you
would still have to have the user's login info to decrypt any windows
encrypted information (not that it's very hard to crack). Also, it doesn't
let you automatically install anything, but simply verifies whether
something is "Microsoft Signed". Like when you install a driver for a
printer and you get that warning box in XP that states it's not been signed
by M$ or an activeX control that says it's not "signed". You still have to
ok the install either way (not that it's very difficult to fool people into
installing software).
My point is simply that this one seems a little silly. Just because it's
called _NSAKEY does not mean it's a key that was given to the NSA, and even
if it is all it would let them do is create their own "signed" software for
windows.
Do I believe there are back doors to Windows that M$ has put in
intentionally?
Probably.
Do I believe they'd give the information on those back doors to government?
Probably.
Do I think this is the case here?
No.
Why?
Because it's so much easier to hack windows so many other ways they simply
wouldn't bother with something like this. If they wanted a back door they'd
get a real back door.
The argument made here is still valid though the conspiracy theory doesn't
much hold water:
Security by obscurity is not.
And that's why I run open source anywhere I can.
-G
On 1/14/07, preludelinux@mchsi.com <preludelinux@mchsi.com> wrote:
>
> heres a great reason to never use windows. seems there is back door access
> to
> all encryption inside windows. this can be used to run software too making
> all
> encription under windows from within windows useless. this is just one
> backdoor
> im sure theres more.
>
> this is a key for nsa
>
> http://www.heise.de/tp/r4/artikel/5/5263/1.html
>
> now whats in vista , with all the DRM getting more perfect control in
> place ,
> lock outs to the core os whats really hiding and running . the above gives
> the
> abitilty to run any code in a secured mode . the above could be used be
> the nsa
> or by microsoft or anyone ( insert cracker here ) to run code in a secure
> mode.
> just think of a root kit using something like this as an aveanue of attack
>
> whats your thoughts , whats your reasons never to use windows ?
> _______________________________________________
> QCLUG mailing list
> QCLUG@qclug.org
> http://qclug.org/mailman/listinfo/qclug
>
---------------------- multipart/alternative attachment
An HTML attachment was scrubbed...
URL: http://qclug.org/pipermail/qclug/attachments/ae7f92e3/attachment.htm
---------------------- multipart/alternative attachment--