Archive for December 2, 2024

Monday, December 2, 2024

Microsoft-Trusted ICP-Brasil Certificate for google.com

Andrew Ayer (via Hacker News):

A Brazilian certificate authority trusted only by Microsoft has issued a presumably-unauthorized certificate for google.com.

This can used to intercept traffic to Google from Edge and other Windows applications (except Chrome and Firefox). Hug-ops to Google folks.

Microsoft are well aware of the extensive history of problems with this CA - I emailed them my concerns in 2021, and further issues were raised during a public CCADB discussion in 2022 - but they clearly don’t care.

Previously:

Microsoft at 50

Steven Levy:

[Nadella] tells a story from a few years ago, when a group of tech analysts came from China to take the measure of Silicon Valley. They attended all the key developer’s conferences: Apple’s WWDC, Google I/O, AWS Re:Invent, and of course, Microsoft’s own Build. “They said, ‘God, you know what? For anything that the United States has got, we’ve got equivalents in China. We’ve got ecommerce, search, hardware manufacturers, social networks of our own. But there’s this one company that we visited, Microsoft, that’s pretty different.’” As Nadella tells it, the delegation marveled at the company’s breadth, with everything from the PC operating system to Xbox: “It all comes together as this one systems platform.” And, he now implies, Microsoft’s breadth sets it up to seize the most propitious opportunity in the history of technology.

It was an odd choice of anecdote, considering that Microsoft’s history has been plagued by its eagerness to use its size as a cudgel—and that today it’s under investigation by the European Union and the US Federal Trade Commission for those same tendencies. Nadella skates past that and brings up his greatest triumph, AI. He tells the tens of thousands of Softies around the world that the new goal was to put Copilot—that’s Microsoft’s name for its AI—in the hands of people and organizations everywhere.

Nadella doesn’t say outright what everyone in the room knows: Just a decade ago, pundits had declared the company brain-dead.

[…]

“In a five-minute break, walking to the bathroom and back, we were able to completely change the company strategy around support for Linux and open source,” says Guthrie. When Nadella later told Ballmer, who was in his final days at the company, he simply informed him of the policy shift. Then, two months after Nadella became CEO, Guthrie suggested that they change the name “Windows Azure” to “Microsoft Azure.” It was done on the spot, sending a signal that Microsoft would no longer assess every move based on its impact on Windows.

Previously:

FTC Opens Microsoft Antitrust Investigation

Kyle Wiggers:

The FTC has launched an antitrust investigation into Microsoft, accordingtomultiplereports that corroborate earlier reporting by the Financial Times.

The agency is said to be looking into whether Microsoft violated antitrust law in multiple segments of its business, including its public cloud, AI, and cybersecurity product lines. Of particular interest to the FTC is the way Microsoft bundles its cloud products with its office and security tools, says The New York Times.

Via Dare Obasanjo:

Being “better together” has been Microsoft’s strategy in the enterprise forever and it’s escaped scrutiny mainly because consumer big tech companies like Amazon, Google & Meta took the regulatory spotlight.

Nick Heer:

Obviously, the FTC’s concerns with Microsoft’s business practices stretch well beyond bundling Teams. According to this Bloomberg report, the Commission is interested in cloud and identity tying, too. On the one hand, it is enormously useful to businesses to have a suite of products with a single point of management and shared credentials. On the other hand, it is a monolithic system that is a non-starter for potential competitors.

The government is understandably worried about the security and stability risks of global dependence on Microsoft, too, but this is odd:

The CrowdStrike crash that affected millions of devices operating on Microsoft Windows systems earlier this year was itself a testament to the widespread use of the company’s products and how it directly affects the global economy.

Previously:

Microsoft Donates the Mono Project to Wine

Mono (via Hacker News, Slashdot):

The Mono Project (mono/mono) (‘original mono’) has been an important part of the .NET ecosystem since it was launched in 2001. Microsoft became the steward of the Mono Project when it acquired Xamarin in 2016.

The last major release of the Mono Project was in July 2019, with minor patch releases since that time. The last patch release was February 2024.

We are happy to announce that the WineHQ organization will be taking over as the stewards of the Mono Project upstream at wine-mono / Mono · GitLab (winehq.org).

[…]

Microsoft maintains a modern fork of Mono runtime in the dotnet/runtime repo and has been progressively moving workloads to that fork. That work is now complete, and we recommend that active Mono users and maintainers of Mono-based app frameworks migrate to .NET which includes work from this fork.

Previously: