News for hackers. Stuff that matters.

A comment on Even when told not to, Windows 10 doesn't stop talking to Microsoft. Parent comment

Re:Even when told not to, Windows 10 doesn't stop talking to... by irq-1 on Thursday August 13, 2015 @12:26PM (#10055345)
> If I don't know what it's doing, how can I trust it?

It's not enough to examine software: if you don't trust the company, then anything they say or promise is worthless. Automatic updates can change anything, including the TOS! This is the same company that sells a 1984-Telescreen (XBox) with an always-on camera and microphone. _NSA shouldn't be forgotten.

Oracle likes to tout Java as GPL, but what does that matter when we know the company can't be trusted? Who controls a software project is the key, not the licenses or corporate promises. There's no point in trusting iOS because we've examined it, we also have to trust Apple.

[ Parent | on HN ]
Re:Even when told not to, Windows 10 doesn't stop talking to... by bad_user on Thursday August 13, 2015 @01:10PM (#10055684)
The source-code in OpenJDK can be inspected and OpenJDK itself can be forked if Oracle's stewardship goes awry, which is the whole freaking point of open-source, so I don't see how that can compare with Windows or iOS.
[ Parent | on HN ]
Re:Even when told not to, Windows 10 doesn't stop talking to... by irq-1 on Thursday August 13, 2015 @01:16PM (#10055731)
> OpenJDK itself can be forked

Tell that to Google.

[ Parent | on HN ]
Re:Even when told not to, Windows 10 doesn't stop talking to... by satai on Thursday August 13, 2015 @01:24PM (#10055786)
Android wasn't fork of OpenJDK
[ Parent | on HN ]
Re:Even when told not to, Windows 10 doesn't stop talking to... by anonbanker on Thursday August 13, 2015 @08:37PM (#10058016)
but Dalvik was.
[ Parent | on HN ]
Re:Even when told not to, Windows 10 doesn't stop talking to... by satai on Monday August 17, 2015 @11:00AM (#10073420)
No. Dalvik was a new implementation and for the android standard library was used a fork of Harmony.
[ Parent | on HN ]
Re:Even when told not to, Windows 10 doesn't stop talking to... by bad_user on Friday August 14, 2015 @01:10AM (#10058731)
No, Dalvik is not a fork of OpenJDK, but a clean room implementation. If it would have been a fork, then Google would be protected by the GPL license.
[ Parent | on HN ]
Re:Even when told not to, Windows 10 doesn't stop talking to... by tedunangst on Thursday August 13, 2015 @02:36PM (#10056272)
What shouldn't we forget about _NSA?
[ Parent | on HN ]
Re:Even when told not to, Windows 10 doesn't stop talking to... by anonbanker on Thursday August 13, 2015 @10:11PM (#10058291)
I think he meant _NSAKEY [0].

0. https://en.wikipedia.org/wiki/NSAKEY

[ Parent | on HN ]
Re:Even when told not to, Windows 10 doesn't stop talking to... by blackbeard on Thursday August 13, 2015 @03:49PM (#10056744)
Yes we should forget it.

They worked out it's easier to get at our data out and on home territory (cloud, telemetry) than actually have to break into your kit.

[ Parent | on HN ]
Re:Even when told not to, Windows 10 doesn't stop talking to... by sliverstorm on Thursday August 13, 2015 @01:05PM (#10055650)
Or as I like to put it, at the end of the day you have to trust someone, somewhere in the chain.

In the case of software vendors, you have to trust the vendor.

You cannot independently verify everything. You do not have the expertise nor the bandwidth.

Edit: and if you have the software audited, are you not then trusting the auditor?

[ Parent | on HN ]
Re:Even when told not to, Windows 10 doesn't stop talking to... by bad_user on Thursday August 13, 2015 @01:16PM (#10055727)
I don't like this argument. It's not necessarily you who has to audit your software. You can pay other people to do it. Big companies can pay for it. Your government's institutions can pay for it. If on the other hand the software is closed-source, then that's not an option. And especially for governments and for big companies Windows is a security liability.
[ Parent | on HN ]
Re:Even when told not to, Windows 10 doesn't stop talking to... by TheOtherHobbes on Thursday August 13, 2015 @01:38PM (#10055898)
True, but there's no logical fallacy in writing off companies and products if they're consistently untrustworthy.
[ Parent | on HN ]