Conficker, 60 Minutes, and corporate corruption of the news

[greggh]

http://news.cnet.com/8301-1009_3-10206784-83.html

Notice that the words Microsoft, Windows, and "operating system" are never used. They never explain that malware targets an OS. They don't report that Conficker can only exploit a computer running Windows.

I read that Microsoft just signed a massive multi-million dollar ad campaign with CBS for Windows commercials on the NCAA basketball games. It's so blatantly corrupt. Corporate media and the need for corporate advertising eliminates truth from television news. There's no essential difference between the corruption of 60 Minutes on CBS and any show on Fox News. It's all tailored to please the corporations.

Notice the "Sponsored by Microsoft" on the Cnet video when you watch it. By the way, CBS/Viacom recently bought Cnet.

[dann]

I think there are a few problems here, and they are all educational. This report is targeted to the general population. The general population may not understand what an operating system is, what windows is, etc. Thus, they just say Computer. Everyone knows what a computer is.

On top of that, the majority of people have "PC's using windows" and to them that's a computer. The whole damn thing is a computer, including windows.

While we can pick this apart and understand that the problem is with Windows and their shitty security, the majority of people would not understand this without a more in-depth reporting covering operating systems and differences. That is beyond the scope of this report. It's unfortunate, but people approach computers like they do dvd players or vcrs.

[dann]

Regardless, this is getting ridiculous. MS keeps touting better security and crap and here we are again.

What we need is a follow-up report about how Linux, BSD, and even Apple are not affected by this crap. But will that happen? Nope, more than likely we'll see an apple add about this.

[greggh]

Sorry Dann, I don't buy that as an explanation. It doesn't take that much more in-depth coverage to say that all computers run an operating system, and the operating system that this worm attacks is Windows. I also thinking you're really stretching things when you say that the general population may not understand that Windows is. Maybe, you're in a charitable mood and looking to put the blame for the deception of this piece to mere incompetency on the part of CBS or the public's understanding. When CBS has Microsoft as a major advertiser and they refuse to point out how it is specifically their advertiser's product that is targeted, arguably the single most important point of the news story that should be conveyed, I'm not willing to assume anything less than corruption.

[greggh]

Regardless, this is getting ridiculous. MS keeps touting better security and crap and here we are again.

What we need is a follow-up report about how Linux, BSD, and even Apple are not affected by this crap. But will that happen? Nope, more than likely we'll see an apple add about this.

I'm with you here.

[dann]

Hmmmm... I wonder if there is a liability factor here with regards to specifically naming Windows in this kind of situation. Or are they really spinning things in the background.

Tough to say with certainty.

[Claudio]

I've come across a number of people that look at me funny when I ask them what they're running on their computer. Some of them mention "Microsoft" and that's about it. They don't know the difference between Microsoft Windows and Microsoft Office. Some think they are one and the same. Thus, I think Dann makes a valid point. Your everyday person may not be able to grasp the concept of an operating system. For those of us coming from the early days of the personal computer, it is very apparent because not all computers came with them. Today, Windows is ubiquitously found on all PCs sold in brick-and-mortar retail outlets. Of course, the only thing they understand is that their computer runs the Internet and that they can write letters and edit pictures with it.

Again, understand that 60 Minutes was trying to cover all of the bases when it comes to computer users, and unfortunately the "least common denominator" is the most important target here. Mention anything other than "your computer" and you'll lose them completely.

[mikeh]

I had set my PC to record this so I could check it out further. What a fluff piece it was. Even not addressing the issues you guys already brought up, some things I found interesting.

1) The demo the Symantec guy did where he had the reporter click on the video link. He never mentioned if that virus/worm she supposedly acquired was because of the same vulnerability Conficker uses. Granted since this is a fluff piece you would probably here them say this just shows how easy it is for a hacker to own your system.

2) On the system that was the "hackers" computer monitoring the reporter you could see it was a Ubuntu Linux box running Windows XP SP2 under VMWare

3) Also on the hackers system they were running Nuclear RAT 2.1.0 for the key logging, and screen view. This software was running under the XP SP2 virtual machine they had running.

4) I would really like to know what if anything the link she clicked on supposedly did. I think the system was already compromised for their demo. If the link she clicked on did actually load any software unbeknownst to the reporter, I would love to know the vulnerability they used. How unsecured was that system? I am betting all that link did was in effect ping the other system to start the Nuclear RAT connection.

Was glad 60 minutes is in hi-def. Made it nice to see some detail in the screen shots.

All in all it was just a nice piece to scare people, and drum up some sales of Symantec's stuff.

[mikeh]

By the way, a friend of mine had asked me for some screenshots of the show. I took a few of the "hacking segment" early on in the piece.

In case anyone wants them, here is a 1.4MB or so zip with about 8 images.

http://www.hillsoftware.com/60minutes.zip

In them you can see the website address the reporter clicked on (I think symantec was redirecting that site to their own internal server), and the rest are shots that basically show the Ubuntu box and its XP VM running under VMWare.

[dann]

Mikeh, thanks for capturing those, you saved me from looking at that small video to see what you were talking about! Awesome job!

[mikeh]

Dann,

No problem. Glad you liked them.

I am betting they had those systems running on a closed network. All the facebook,video, and banking sites were fake and running on a webserver on their closed network for the demo.

Mike

[eddie]

http://hackaday.com/2009/03/30/containing-conficker/