Is WMF an intentional MS backdoor?

Security Now! Transcript of Episode #22

In a recent edition of Security Now! Steve Gibson details why he believes Microsoft intentionally introduced the WMF feature responsible for last week’s zero-day vulnerability. Gibson is now on a quest to discover exactly when this feature made it’s way into Windows and who is responsible for it. This is particularly troubling when taken in context with Microsoft’s ambition to enter the security services market, something I’ve talked about before. I’ll definitely be keeping my eye on this one.

update: Despite the stir Gibson’s claims have created, it would seem his argument is without merit. The story has been dbunked by at least 2 people in the community. Stephen Toulouse, Communications Manager for security response at Microsoft (ie: media frontman for MS Sec) posted his answer to various questions about the WMF feature on the MSRC blog. Thomas C. Green also posted a blistering critique of Gibson’s story completely ripping it to shreds. Green’s not exactly friendly to Microsoft either for that matter…

Age and technology

When I turned 30, there wasn’t anything I could put my finger on that made me feel older. I don’t mean the physical effects of “feeling older,” but more the types of things that signify a change in one’s world view, personal preferences, that sort of thing. A year later I’ve begun to notice some minor changes in myself that I really didn’t even know were there. It didn’t even hit me until I noticed similarities in the way I was feeling and some things I’d picked up on from older colleagues.

I’m one of those ubergeeks that never throws away a computer because there’s always the possibility that I might need it for something. (I’ve still got a Mac Quadra, some 3/486’s, and a Commodore 64 laying around the house..) My home network looks more like something you’d find at a small office, than a home. However, I’m feeling this urge, for the first time in my life, to simplify. I think it boils down to the fact that I work at solving problems with technology 40 hours a week. When I come home, I just want things to work. Perhaps that’s what’s been drawing me closer to Apple products lately.

Don’t get me wrong; I still love gaming, building PCs and experimenting with new stuff. It’s just that now all that stuff is something I enjoy apart from using the computer. (ie: I don’t want to be fiddling with the firewall, I just want to play my game) Anyway, maybe this is a part of growing older, maybe not. Only time will tell I suppose.

MSPR giving Trustworthy Computing a bad name

InformationWeek | Security | Microsoft Dubs New WMF Bugs ‘Performance Issues’ | January 10, 2006

The Trustworthy Computing initiative has been a mostly positive thing for Microsoft’s customers, but every once in a while, you really have to wonder if it’s all a PR game. In reality, the guys on the TC security team are doing a great job. It’s the company’s PR machine that needs to be told to shut up once in a while.