[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
www/proprietary proprietary-back-doors.de.html ...
From: |
GNUN |
Subject: |
www/proprietary proprietary-back-doors.de.html ... |
Date: |
Tue, 26 Sep 2017 16:29:39 -0400 (EDT) |
CVSROOT: /web/www
Module name: www
Changes by: GNUN <gnun> 17/09/26 16:29:39
Modified files:
proprietary : proprietary-back-doors.de.html
proprietary-back-doors.it.html
proprietary/po : proprietary-back-doors.it-diff.html
Added files:
proprietary/po : proprietary-back-doors.de-diff.html
Log message:
Automatic update by GNUnited Nations.
CVSWeb URLs:
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-back-doors.de.html?cvsroot=www&r1=1.22&r2=1.23
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/proprietary-back-doors.it.html?cvsroot=www&r1=1.19&r2=1.20
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/po/proprietary-back-doors.it-diff.html?cvsroot=www&r1=1.4&r2=1.5
http://web.cvs.savannah.gnu.org/viewcvs/www/proprietary/po/proprietary-back-doors.de-diff.html?cvsroot=www&rev=1.1
Patches:
Index: proprietary-back-doors.de.html
===================================================================
RCS file: /web/www/www/proprietary/proprietary-back-doors.de.html,v
retrieving revision 1.22
retrieving revision 1.23
diff -u -b -r1.22 -r1.23
--- proprietary-back-doors.de.html 20 Jul 2017 12:59:45 -0000 1.22
+++ proprietary-back-doors.de.html 26 Sep 2017 20:29:39 -0000 1.23
@@ -1,4 +1,9 @@
-<!--#set var="ENGLISH_PAGE"
value="/proprietary/proprietary-back-doors.en.html" -->
+<!--#set var="PO_FILE"
+ value='<a href="/proprietary/po/proprietary-back-doors.de.po">
+ https://www.gnu.org/proprietary/po/proprietary-back-doors.de.po</a>'
+ --><!--#set var="ORIGINAL_FILE"
value="/proprietary/proprietary-back-doors.html"
+ --><!--#set var="DIFF_FILE"
value="/proprietary/po/proprietary-back-doors.de-diff.html"
+ --><!--#set var="OUTDATED_SINCE" value="2017-07-28" --><!--#set
var="ENGLISH_PAGE" value="/proprietary/proprietary-back-doors.en.html" -->
<!--#include virtual="/server/header.de.html" -->
<!-- Parent-Version: 1.83 -->
@@ -8,6 +13,7 @@
<!--#include virtual="/proprietary/po/proprietary-back-doors.translist" -->
<!--#include virtual="/server/banner.de.html" -->
+<!--#include virtual="/server/outdated.de.html" -->
<h2>Proprietäre Hintertüren</h2>
<p><a href="/proprietary/">Weitere Beispiele proprietärer
Schadsoftware</a></p>
@@ -548,7 +554,7 @@
<p class="unprintable"><!-- timestamp start -->
Letzte Ãnderung:
-$Date: 2017/07/20 12:59:45 $
+$Date: 2017/09/26 20:29:39 $
<!-- timestamp end -->
</p>
Index: proprietary-back-doors.it.html
===================================================================
RCS file: /web/www/www/proprietary/proprietary-back-doors.it.html,v
retrieving revision 1.19
retrieving revision 1.20
diff -u -b -r1.19 -r1.20
--- proprietary-back-doors.it.html 6 Jul 2017 20:59:54 -0000 1.19
+++ proprietary-back-doors.it.html 26 Sep 2017 20:29:39 -0000 1.20
@@ -1,4 +1,9 @@
-<!--#set var="ENGLISH_PAGE"
value="/proprietary/proprietary-back-doors.en.html" -->
+<!--#set var="PO_FILE"
+ value='<a href="/proprietary/po/proprietary-back-doors.it.po">
+ https://www.gnu.org/proprietary/po/proprietary-back-doors.it.po</a>'
+ --><!--#set var="ORIGINAL_FILE"
value="/proprietary/proprietary-back-doors.html"
+ --><!--#set var="DIFF_FILE"
value="/proprietary/po/proprietary-back-doors.it-diff.html"
+ --><!--#set var="OUTDATED_SINCE" value="2017-07-28" --><!--#set
var="ENGLISH_PAGE" value="/proprietary/proprietary-back-doors.en.html" -->
<!--#include virtual="/server/header.it.html" -->
<!-- Parent-Version: 1.83 -->
@@ -8,6 +13,7 @@
<!--#include virtual="/proprietary/po/proprietary-back-doors.translist" -->
<!--#include virtual="/server/banner.it.html" -->
+<!--#include virtual="/server/outdated.it.html" -->
<h2>Backdoor proprietarie</h2>
<p><a href="/proprietary/proprietary.html">Altri esempi di malware
@@ -445,7 +451,7 @@
<p class="unprintable"><!-- timestamp start -->
Ultimo aggiornamento:
-$Date: 2017/07/06 20:59:54 $
+$Date: 2017/09/26 20:29:39 $
<!-- timestamp end -->
</p>
Index: po/proprietary-back-doors.it-diff.html
===================================================================
RCS file: /web/www/www/proprietary/po/proprietary-back-doors.it-diff.html,v
retrieving revision 1.4
retrieving revision 1.5
diff -u -b -r1.4 -r1.5
--- po/proprietary-back-doors.it-diff.html 26 Mar 2017 19:00:34 -0000
1.4
+++ po/proprietary-back-doors.it-diff.html 26 Sep 2017 20:29:39 -0000
1.5
@@ -11,7 +11,7 @@
</style></head>
<body><pre>
<!--#include virtual="/server/header.html" -->
-<!-- Parent-Version: 1.79 -->
+<!-- Parent-Version: <span
class="removed"><del><strong>1.83</strong></del></span> <span
class="inserted"><ins><em>1.84</em></ins></span> -->
<title>Proprietary Back Doors - GNU Project - Free Software
Foundation</title>
<!--#include virtual="/proprietary/po/proprietary-back-doors.translist"
-->
<!--#include virtual="/server/banner.html" -->
@@ -31,7 +31,31 @@
<!-- WEBMASTERS: make sure to place new items on top under each subsection
-->
<ul>
<li>
- <span class="inserted"><ins><em><p>Vizio “smart”
+ <span class="inserted"><ins><em><p>Tesla cars have a <a
href="https://techcrunch.com/2017/09/09/tesla-flips-a-switch-to-increase-the-range-of-some-cars-in-florida-to-help-people-evacuate/">universal
back door</a>.</p>
+
+ <p>While remotely allowing car “owners” to use the whole
battery
+ capacity did not do them any harm, the same back door would permit
+ Tesla (perhaps under the command of some government) to remotely order
+ the car to use none of its battery. Or perhaps to drive its passenger
+ to a torture prison.</p>
+ </li>
+
+ <li></em></ins></span>
+ <p id="InternetCameraBackDoor">Many models of Internet-connected
+ cameras contain a glaring backdoor—they have login accounts
+ with hard-coded passwords, which can't be changed, and <a
+
href="https://arstechnica.com/security/2017/06/internet-cameras-expose-private-video-feeds-and-remote-controls/">
+ there is no way to delete these accounts either</a>.
+ </p>
+
+ <p>Since these accounts with hard-coded passwords are impossible to
+ delete, this problem is not merely an insecurity; it amounts to a
+ backdoor that can be used by the manufacturer (and government) to
+ spy on users.</p>
+ </li>
+
+ <li>
+ <p>Vizio “smart”
TVs <a
href="https://www.ftc.gov/news-events/blogs/business-blog/2017/02/what-vizio-was-doing-behind-tv-screen">have
a universal back door</a>.</p>
</li>
@@ -44,7 +68,7 @@
there isn't one, but it seems pretty clear.</p>
</li>
- <li><p>Chrome has a back door <a
href="https://consumerist.com/2017/01/18/why-is-google-blocking-this-ad-blocker-on-chrome/">for
+ <li id="chrome-erase-addons"><p>Chrome has a back door <a
href="https://consumerist.com/2017/01/18/why-is-google-blocking-this-ad-blocker-on-chrome/">for
remote erasure of add-ons</a>.</p>
</li>
@@ -63,7 +87,7 @@
alter them too</a>.</p>
</li>
- <li></em></ins></span>
+ <li>
<p>Xiaomi phones come with <a
href="https://www.thijsbroenink.com/2016/09/xiaomis-analytics-app-reverse-engineered">a
universal back door in the application processor, for
Xiaomi's use</a>.</p>
@@ -82,9 +106,16 @@
total control of the machine by repeatedly nagging the user
for an admini password</a>.</p>
</li>
- <li id="universal-back-door-phone-modem"><p>The universal back
door in portable phones <a
-
href="https://www.schneier.com/blog/archives/2006/12/remotely_eavesd_1.html">is
- employed to listen through their microphones</a>.</p>
+ <span class="removed"><del><strong><li
id="universal-back-door-phone-modem"><p>The</strong></del></span>
+ <span class="inserted"><ins><em><li>
+ <p>The</em></ins></span> universal back door in portable phones
+ <a
+ <span
class="removed"><del><strong>href="https://www.schneier.com/blog/archives/2006/12/remotely_eavesd_1.html">is</strong></del></span>
<span
class="inserted"><ins><em>href="https://www.schneier.com/blog/archives/2006/12/remotely_eavesd_1.html">
+ is</em></ins></span> employed to listen through their
microphones</a>.</p>
+ <span class="inserted"><ins><em><p>Most mobile phones have this
universal back door, which has been
+ used to
+ <a
href="http://www.slate.com/blogs/future_tense/2013/07/22/nsa_can_reportedly_track_cellphones_even_when_they_re_turned_off.html">
+ turn them malicious</a>.</p></em></ins></span>
<p>More about <a
href="http://www.osnews.com/story/27416/The_second_operating_system_hiding_in_every_mobile_phone">the
nature of this problem</a>.</p>
</li>
@@ -154,13 +185,13 @@
</li>
<li>
-<p>Most mobile phones have a universal back door, which has been used to
+<span class="removed"><del><strong><p>Most mobile phones have a
universal back door, which has been used to
<a
href="http://www.slate.com/blogs/future_tense/2013/07/22/nsa_can_reportedly_track_cellphones_even_when_they_re_turned_off.html">
turn them malicious</a>.
</p>
</li>
-<li>
+<li></strong></del></span>
<p><a
href="http://www.theguardian.com/technology/2014/dec/18/chinese-android-phones-coolpad-hacker-backdoor">
A Chinese version of Android has a universal back door</a>. Nearly all
models of mobile phones have a universal back door in the modem chip. So
@@ -171,7 +202,7 @@
<li>
<p>Microsoft Windows has a universal back door through which
-<a <span
class="removed"><del><strong>href="http://www.informationweek.com/news/showArticle.jhtml?articleID=201806263"></strong></del></span>
<span
class="inserted"><ins><em>href="https://web.archive.org/web/20071011010707/http://informationweek.com/news/showArticle.jhtml?articleID=201806263"></em></ins></span>
+<a
href="https://web.archive.org/web/20071011010707/http://informationweek.com/news/showArticle.jhtml?articleID=201806263">
any change whatsoever can be imposed on the users</a>.
</p>
<p>More information on when
@@ -185,13 +216,9 @@
</p>
</li>
-<span class="removed"><del><strong><li>
-<p>Windows 8's back doors are so gaping that</strong></del></span>
-
-<span class="inserted"><ins><em><li><p>German
government</em></ins></span> <a <span
class="removed"><del><strong>href="https://web.archive.org/web/20160310201616/http://drleonardcoldwell.com/2013/08/23/leaked-german-government-warns-key-entities-not-to-use-windows-8-linked-to-nsa/"></strong></del></span>
<span
class="inserted"><ins><em>href="https://web.archive.org/web/20160310201616/http://drleonardcoldwell.com/2013/08/23/leaked-german-government-warns-key-entities-not-to-use-windows-8-linked-to-nsa/">veers
+<li><p>German government <a
href="https://web.archive.org/web/20160310201616/http://drleonardcoldwell.com/2013/08/23/leaked-german-government-warns-key-entities-not-to-use-windows-8-linked-to-nsa/">veers
away from Windows 8 computers with TPM 2.0 due to potential back
-door capabilities of</em></ins></span> the <span
class="removed"><del><strong>German government has decided it can't be
trusted</a>.
-</p></strong></del></span> <span class="inserted"><ins><em>TPM 2.0
chip</a>.</p></em></ins></span>
+door capabilities of the TPM 2.0 chip</a>.</p>
</li>
<li>
@@ -278,20 +305,20 @@
</li>
<li>
-<p>The Amazon <span
class="removed"><del><strong>Kindle</strong></del></span> <span
class="inserted"><ins><em>Kindle-Swindle</em></ins></span> has a back door that
has been used to
+<p>The Amazon Kindle-Swindle has a back door that has been used to
<a
href="http://pogue.blogs.nytimes.com/2009/07/17/some-e-books-are-more-equal-than-others/">
-remotely erase books</a>. <span class="inserted"><ins><em>One of the
books erased was 1984, by George Orwell.</em></ins></span>
+remotely erase books</a>. One of the books erased was 1984, by George
Orwell.
</p>
-<span class="inserted"><ins><em><p>Amazon responded to criticism by
saying it would delete books only
+<p>Amazon responded to criticism by saying it would delete books only
following orders from the state. However, that policy didn't last.
In 2012
it <a
href="http://boingboing.net/2012/10/22/kindle-user-claims-amazon-dele.html">wiped
a user's Kindle-Swindle and deleted her account</a>, then offered her
-kafkaesque “explanations.”</p></em></ins></span>
+kafkaesque “explanations.”</p>
-<p>The <span class="removed"><del><strong>Kindle</strong></del></span>
<span class="inserted"><ins><em>Kindle-Swindle</em></ins></span> also has a
+<p>The Kindle-Swindle also has a
<a
href="http://www.amazon.com/gp/help/customer/display.html?nodeId=200774090">
universal back door</a>.
</p>
@@ -389,7 +416,7 @@
of this article.</p>
</div>
-<p>Copyright © <span
class="removed"><del><strong>2014-2016</strong></del></span> <span
class="inserted"><ins><em>2014-2017</em></ins></span> Free Software Foundation,
Inc.</p>
+<p>Copyright © 2014-2017 Free Software Foundation, Inc.</p>
<p>This page is licensed under a <a rel="license"
href="http://creativecommons.org/licenses/by-nd/4.0/">Creative
@@ -399,7 +426,7 @@
<p class="unprintable">Updated:
<!-- timestamp start -->
-$Date: 2017/03/26 19:00:34 $
+$Date: 2017/09/26 20:29:39 $
<!-- timestamp end -->
</p>
</div>
Index: po/proprietary-back-doors.de-diff.html
===================================================================
RCS file: po/proprietary-back-doors.de-diff.html
diff -N po/proprietary-back-doors.de-diff.html
--- /dev/null 1 Jan 1970 00:00:00 -0000
+++ po/proprietary-back-doors.de-diff.html 26 Sep 2017 20:29:39 -0000
1.1
@@ -0,0 +1,436 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+ "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<!-- Generated by GNUN -->
+<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
+<head>
+<meta http-equiv="content-type" content="text/html; charset=utf-8" />
+<title>/proprietary/proprietary-back-doors.html-diff</title>
+<style type="text/css">
+span.removed { background-color: #f22; color: #000; }
+span.inserted { background-color: #2f2; color: #000; }
+</style></head>
+<body><pre>
+<!--#include virtual="/server/header.html" -->
+<!-- Parent-Version: <span
class="removed"><del><strong>1.83</strong></del></span> <span
class="inserted"><ins><em>1.84</em></ins></span> -->
+<title>Proprietary Back Doors - GNU Project - Free Software
Foundation</title>
+ <!--#include virtual="/proprietary/po/proprietary-back-doors.translist"
-->
+<!--#include virtual="/server/banner.html" -->
+<h2>Proprietary Back Doors</h2>
+
+<p><a href="/proprietary/proprietary.html">Other examples of
proprietary malware</a></p>
+
+<p>Nonfree (proprietary) software is very often malware (designed to
+mistreat the user). Nonfree software is controlled by its developers,
+which puts them in a position of power over the users; <a
+href="/philosophy/free-software-even-more-important.html">that is the
+basic injustice</a>. The developers often exercise that power to the
+detriment of the users they ought to serve.</p>
+
+<p>Here are examples of demonstrated back doors in proprietary
software.</p>
+
+<!-- WEBMASTERS: make sure to place new items on top under each subsection
-->
+<ul>
+ <li>
+ <span class="inserted"><ins><em><p>Tesla cars have a <a
href="https://techcrunch.com/2017/09/09/tesla-flips-a-switch-to-increase-the-range-of-some-cars-in-florida-to-help-people-evacuate/">universal
back door</a>.</p>
+
+ <p>While remotely allowing car “owners” to use the whole
battery
+ capacity did not do them any harm, the same back door would permit
+ Tesla (perhaps under the command of some government) to remotely order
+ the car to use none of its battery. Or perhaps to drive its passenger
+ to a torture prison.</p>
+ </li>
+
+ <li></em></ins></span>
+ <p id="InternetCameraBackDoor">Many models of Internet-connected
+ cameras contain a glaring backdoor—they have login accounts
+ with hard-coded passwords, which can't be changed, and <a
+
href="https://arstechnica.com/security/2017/06/internet-cameras-expose-private-video-feeds-and-remote-controls/">
+ there is no way to delete these accounts either</a>.
+ </p>
+
+ <p>Since these accounts with hard-coded passwords are impossible to
+ delete, this problem is not merely an insecurity; it amounts to a
+ backdoor that can be used by the manufacturer (and government) to
+ spy on users.</p>
+ </li>
+
+ <li>
+ <p>Vizio “smart”
+ TVs <a
href="https://www.ftc.gov/news-events/blogs/business-blog/2017/02/what-vizio-was-doing-behind-tv-screen">have
+ a universal back door</a>.</p>
+ </li>
+
+ <li><p>The Amazon Echo appears to have a universal back door,
since
+ <a
href="https://en.wikipedia.org/wiki/Amazon_Echo#Software_updates">
+ it installs “updates” automatically</a>.</p>
+ <p>We have found nothing explicitly documenting the lack of any way
to
+ disable remote changes to the software, so we are not completely sure
+ there isn't one, but it seems pretty clear.</p>
+ </li>
+
+ <li id="chrome-erase-addons"><p>Chrome has a back door <a
href="https://consumerist.com/2017/01/18/why-is-google-blocking-this-ad-blocker-on-chrome/">for
+ remote erasure of add-ons</a>.</p>
+ </li>
+
+ <li>
+ <p>WhatsApp <a
href="https://www.theguardian.com/technology/2017/jan/13/whatsapp-backdoor-allows-snooping-on-encrypted-messages">has
+ a back door that the company can use to read the plaintext
+ of messages</a>.</p>
+
+ <p>This should not come as a surprise. Nonfree software for
+ encryption is never trustworthy.</p>
+ </li>
+
+ <li><p>A pregnancy test controller application not only
+ can <a
href="http://www.theverge.com/2016/4/25/11503718/first-response-pregnancy-pro-test-bluetooth-app-security">spy
+ on many sorts of data in the phone, and in server accounts, it can
+ alter them too</a>.</p>
+ </li>
+
+ <li>
+ <p>Xiaomi phones come with <a
href="https://www.thijsbroenink.com/2016/09/xiaomis-analytics-app-reverse-engineered">a
+ universal back door in the application processor, for
+ Xiaomi's use</a>.</p>
+
+ <p>This is separate from <a
href="#universal-back-door-phone-modem">the
+ universal back door in the modem processor that the local
+ phone company can use</a>.</p>
+ </li>
+
+ <li><p>Capcom's Street Fighter V update <a
href="https://web.archive.org/web/20160930051146/http://www.theregister.co.uk/2016/09/23/capcom_street_fighter_v/">installed
+ a driver that can be used as a backdoor by any application
+ installed on a Windows computer</a>.</p>
+ </li>
+
+ <li><p>The Dropbox app for Macintosh <a
href="http://applehelpwriter.com/2016/07/28/revealing-dropboxs-dirty-little-security-hack/">takes
+ total control of the machine by repeatedly nagging the user
+ for an admini password</a>.</p>
+ </li>
+ <span class="removed"><del><strong><li
id="universal-back-door-phone-modem"><p>The</strong></del></span>
+ <span class="inserted"><ins><em><li>
+ <p>The</em></ins></span> universal back door in portable phones
+ <a
+ <span
class="removed"><del><strong>href="https://www.schneier.com/blog/archives/2006/12/remotely_eavesd_1.html">is</strong></del></span>
<span
class="inserted"><ins><em>href="https://www.schneier.com/blog/archives/2006/12/remotely_eavesd_1.html">
+ is</em></ins></span> employed to listen through their
microphones</a>.</p>
+ <span class="inserted"><ins><em><p>Most mobile phones have this
universal back door, which has been
+ used to
+ <a
href="http://www.slate.com/blogs/future_tense/2013/07/22/nsa_can_reportedly_track_cellphones_even_when_they_re_turned_off.html">
+ turn them malicious</a>.</p></em></ins></span>
+ <p>More about <a
href="http://www.osnews.com/story/27416/The_second_operating_system_hiding_in_every_mobile_phone">the
nature of this problem</a>.</p>
+ </li>
+
+ <li><p><a
href="https://theintercept.com/2015/12/28/recently-bought-a-windows-computer-microsoft-probably-has-your-encryption-key/">
+ Microsoft has already backdoored its disk
encryption</a>.</p></li>
+
+ <li><p>Modern gratis game cr…apps
+ <a
href="http://toucharcade.com/2015/09/16/we-own-you-confessions-of-a-free-to-play-producer/">
+ collect a wide range of data about their users and their users'
+ friends and associates</a>.</p>
+
+ <p>Even nastier, they do it through ad networks that merge the data
+ collected by various cr…apps and sites made by different
+ companies.</p>
+
+ <p>They use this data to manipulate people to buy things, and hunt
+ for “whales” who can be led to spend a lot of money. They
+ also use a back door to manipulate the game play for specific
players.</p>
+
+ <p>While the article describes gratis games, games that cost money
+ can use the same tactics.</p>
+ </li>
+ <li>
+ <p>Dell computers, shipped with Windows, had a bogus root
+ certificate that
+ <a
href="http://fossforce.com/2015/11/dell-comcast-intel-who-knows-who-else-are-out-to-get-you/">allowed
+ anyone (not just Dell) to remotely authorize any software to
+ run</a> on the computer.</p>
+ </li>
+ <li>
+ <p>Baidu's proprietary Android library, Moplus, has a back door
+ that <a
href="https://www.eff.org/deeplinks/2015/11/millions-android-devices-vulnerable-remote-hijacking-baidu-wrote-code-google-made">can
+ “upload files” as well as forcibly install
+ apps</a>.</p>
+ <p>It is used by 14,000 Android applications.</p>
+ </li>
+
+<li><p>ARRIS cable modem has a
+ <a
href="https://w00tsec.blogspot.de/2015/11/arris-cable-modem-has-backdoor-in.html?m=1">
+ backdoor in the backdoor</a>.</p>
+</li>
+ <li><p>Caterpillar vehicles come with
+ <a
href="http://www.zerohedge.com/news/2015-11-19/caterpillar-depression-has-never-been-worse-it-has-cunning-plan-how-deal-it">a
back-door to shutoff the engine</a>
+ remotely.</p>
+ </li>
+<li><p>
+Mac OS X had an <a
href="https://truesecdev.wordpress.com/2015/04/09/hidden-backdoor-api-to-root-privileges-in-apple-os-x/">
+intentional local back door for 4 years</a>.
+</p></li>
+
+<li><p>Users reported that <a
+
href="http://www.networkworld.com/article/2993490/windows/windows-10-upgrades-reportedly-appearing-as-mandatory-for-some-users.html#tk.rss_all">
+ Microsoft was forcing them to replace Windows 7 and 8 with all-spying
+ Windows 10</a>.</p>
+
+ <p>Microsoft was in fact <a
+
href="http://www.computerworld.com/article/3012278/microsoft-windows/microsoft-sets-stage-for-massive-windows-10-upgrade-strategy.html">
+ attacking computers that run Windows 7 and 8</a>, switching on a
flag
+ that said whether to “upgrade” to Windows 10 when users
+ had turned it off.</p>
+
+ <p>Later on, Microsoft published instructions on <a
+
href="http://arstechnica.com/information-technology/2016/01/microsoft-finally-has-a-proper-way-to-opt-out-of-windows-78-to-windows-10-upgrades/">
+ how to permanently reject the downgrade to Windows 10</a>.</p>
+
+ <p>This seems to involve use of a back door in Windows 7 and
8.</p>
+</li>
+
+<li>
+<span class="removed"><del><strong><p>Most mobile phones have a
universal back door, which has been used to
+<a
href="http://www.slate.com/blogs/future_tense/2013/07/22/nsa_can_reportedly_track_cellphones_even_when_they_re_turned_off.html">
+turn them malicious</a>.
+</p>
+</li>
+
+<li></strong></del></span>
+<p><a
href="http://www.theguardian.com/technology/2014/dec/18/chinese-android-phones-coolpad-hacker-backdoor">
+A Chinese version of Android has a universal back door</a>. Nearly all
+models of mobile phones have a universal back door in the modem chip. So
+why did Coolpad bother to introduce another? Because this one is controlled
+by Coolpad.
+</p>
+</li>
+
+<li>
+<p>Microsoft Windows has a universal back door through which
+<a
href="https://web.archive.org/web/20071011010707/http://informationweek.com/news/showArticle.jhtml?articleID=201806263">
+any change whatsoever can be imposed on the users</a>.
+</p>
+<p>More information on when
+<a href="http://slated.org/windows_by_stealth_the_updates_you_dont_want">
+this was used</a>.
+</p>
+<p>In Windows 10, the universal back door is no longer hidden; all
+“upgrades” will
+be <a
href="http://arstechnica.com/information-technology/2015/07/windows-10-updates-to-be-automatic-and-mandatory-for-home-users/">forcibly
+and immediately imposed</a>.
+</p>
+</li>
+
+<li><p>German government <a
href="https://web.archive.org/web/20160310201616/http://drleonardcoldwell.com/2013/08/23/leaked-german-government-warns-key-entities-not-to-use-windows-8-linked-to-nsa/">veers
+away from Windows 8 computers with TPM 2.0 due to potential back
+door capabilities of the TPM 2.0 chip</a>.</p>
+</li>
+
+<li>
+<p>The iPhone has a back door
+<a
href="http://www.telegraph.co.uk/technology/3358134/Apples-Jobs-confirms-iPhone-kill-switch.html">
+that allows Apple to remotely delete apps</a> which Apple considers
+“inappropriate”. Jobs said it's ok for Apple to have this power
+because of course we can trust Apple.
+</p>
+</li>
+
+<li>
+<p>The iPhone has a back door for
+<a
href="http://www.npr.org/2010/11/22/131511381/wipeout-when-your-company-kills-your-iphone">
+remote wipe</a>. It's not always enabled, but users are led into
enabling
+it without understanding.
+</p>
+</li>
+
+<li>
+ <p>Apple can, and regularly does,
+ <a
href="http://arstechnica.com/apple/2014/05/new-guidelines-outline-what-iphone-data-apple-can-give-to-police/">
+ remotely extract some data from iPhones for the state</a>.
+ </p>
+ <p>This may have improved with
+ <a
href="http://www.washingtonpost.com/business/technology/2014/09/17/2612af58-3ed2-11e4-b03f-de718edeb92f_story.html">
+ iOS 8 security improvements</a>; but
+ <a href="https://firstlook.org/theintercept/2014/09/22/apple-data/">
+ not as much as Apple claims</a>.</p>
+ </li>
+
+
+<li>
+<p><a
href="http://www.computerworld.com/article/2500036/desktop-apps/microsoft--we-can-remotely-delete-windows-8-apps.html">
+Windows 8 also has a back door for remotely deleting apps</a>.
+</p>
+
+<p>
+You might well decide to let a security service that you trust
+remotely <em>deactivate</em> programs that it considers malicious.
+But there is no excuse for <em>deleting</em> the programs, and you
+should have the right to decide who (if anyone) to trust in this way.
+</p>
+
+<p>
+As these pages show, if you do want to clean your computer of malware,
+the first software to delete is Windows or iOS.
+</p>
+</li>
+
+<li>
+<p>In Android,
+<a
href="http://www.computerworld.com/article/2506557/security0/google-throws--kill-switch--on-android-phones.html">
+Google has a back door to remotely delete apps.</a> (It is in a program
+called GTalkService).
+</p>
+
+<p>
+Google can also
+<a
href="https://jon.oberheide.org/blog/2010/06/25/remote-kill-and-install-on-google-android/">
+forcibly and remotely install apps</a> through GTalkService (which
+seems, since that article, to have been merged into Google Play).
+This is not equivalent to a universal back door, but permits various
+dirty tricks.
+</p>
+
+<p>
+Although Google's <em>exercise</em> of this power has not been
+malicious so far, the point is that nobody should have such power,
+which could also be used maliciously. You might well decide to let a
+security service remotely <em>deactivate</em> programs that it
+considers malicious. But there is no excuse for allowing it
+to <em>delete</em> the programs, and you should have the right to
+decide who (if anyone) to trust in this way.
+</p>
+</li>
+
+<li>
+<p><a id="samsung"
+href="https://www.fsf.org/blogs/community/replicant-developers-find-and-close-samsung-galaxy-backdoor">
+Samsung Galaxy devices running proprietary Android versions come with a back
+door</a> that provides remote access to the files stored on the device.
+</p>
+</li>
+
+<li>
+<p>The Amazon Kindle-Swindle has a back door that has been used to
+<a
href="http://pogue.blogs.nytimes.com/2009/07/17/some-e-books-are-more-equal-than-others/">
+remotely erase books</a>. One of the books erased was 1984, by George
Orwell.
+</p>
+
+<p>Amazon responded to criticism by saying it would delete books only
+following orders from the state. However, that policy didn't last.
+In 2012
+it <a
href="http://boingboing.net/2012/10/22/kindle-user-claims-amazon-dele.html">wiped
+a user's Kindle-Swindle and deleted her account</a>, then offered her
+kafkaesque “explanations.”</p>
+
+
+<p>The Kindle-Swindle also has a
+<a
href="http://www.amazon.com/gp/help/customer/display.html?nodeId=200774090">
+universal back door</a>.
+</p>
+</li>
+
+<li>
+<p>HP “storage appliances” that use the proprietary
+“Left Hand” operating system have back doors that give
+HP <a
href="http://news.dice.com/2013/07/11/hp-keeps-installing-secret-backdoors-in-enterprise-storage/">
+remote login access</a> to them. HP claims that this does not give HP
+access to the customer's data, but if the back door allows installation of
+software changes, a change could be installed that would give access to the
+customer's data.
+</p>
+</li>
+
+<li>
+<p><a
href="http://www.itworld.com/article/2705284/data-protection/backdoor-found-in-d-link-router-firmware-code.html">
+Some D-Link routers</a> have a back door for changing settings in a dlink
+of an eye.
+</p>
+
+<p>
+<a href="https://github.com/elvanderb/TCP-32764">Many models of router
+have back doors</a>.</p>
+</li>
+
+<li>
+<p><a href="http://sekurak.pl/tp-link-httptftp-backdoor/">
+The TP-Link router has a backdoor</a>.</p>
+</li>
+
+<li>
+<p><a
href="http://www.techienews.co.uk/973462/bitcoin-miners-bundled-pups-legitimate-applications-backed-eula/">
+Some applications come with MyFreeProxy, which is a universal back door
+that can download programs and run them.</a>
+</p>
+</li>
+</ul>
+
+<p>Here is a big problem whose details are still secret.</p>
+
+<ul>
+<li>
+<p><a
href="http://mashable.com/2013/09/11/fbi-microsoft-bitlocker-backdoor/">
+The FBI asks lots of companies to put back doors in proprietary programs.
+</a> We don't know of specific cases where this was done, but every
+proprietary program for encryption is a possibility.</p>
+</li>
+</ul>
+
+<p>Here is a suspicion that we can't prove, but is worth thinking
+about.</p>
+
+<ul>
+<li>
+<p><a
href="http://web.archive.org/web/20150206003913/http://www.afr.com/p/technology/intel_chips_could_be_nsa_key_to_ymrhS1HS1633gCWKt5tFtI">
+Writable microcode for Intel and AMD microprocessors</a> may be a vehicle
+for the NSA to invade computers, with the help of Microsoft, say respected
+security experts.
+</p>
+</li>
+</ul>
+
+<p>The EFF has other examples of the <a
href="https://www.eff.org/deeplinks/2015/02/who-really-owns-your-drones">use
of back doors</a>.</p>
+
+
+</div><!-- for id="content", starts in the include above -->
+<!--#include virtual="/server/footer.html" -->
+<div id="footer">
+<div class="unprintable">
+
+<p>Please send general FSF & GNU inquiries to
+<a href="mailto:address@hidden"><address@hidden></a>.
+There are also <a href="/contact/">other ways to contact</a>
+the FSF. Broken links and other corrections or suggestions can be sent
+to <a
href="mailto:address@hidden"><address@hidden></a>.</p>
+
+<p><!-- TRANSLATORS: Ignore the original text in this paragraph,
+ replace it with the translation of these two:
+
+ We work hard and do our best to provide accurate, good quality
+ translations. However, we are not exempt from imperfection.
+ Please send your comments and general suggestions in this regard
+ to <a href="mailto:address@hidden">
+ <address@hidden></a>.</p>
+
+ <p>For information on coordinating and submitting translations of
+ our web pages, see <a
+ href="/server/standards/README.translations.html">Translations
+ README</a>. -->
+Please see the <a
+href="/server/standards/README.translations.html">Translations
+README</a> for information on coordinating and submitting translations
+of this article.</p>
+</div>
+
+<p>Copyright © 2014-2017 Free Software Foundation, Inc.</p>
+
+<p>This page is licensed under a <a rel="license"
+href="http://creativecommons.org/licenses/by-nd/4.0/">Creative
+Commons Attribution-NoDerivatives 4.0 International
License</a>.</p>
+
+<!--#include virtual="/server/bottom-notes.html" -->
+
+<p class="unprintable">Updated:
+<!-- timestamp start -->
+$Date: 2017/09/26 20:29:39 $
+<!-- timestamp end -->
+</p>
+</div>
+</div>
+</body>
+</html>
+</pre></body></html>
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- www/proprietary proprietary-back-doors.de.html ...,
GNUN <=