Industry


Ads by TechWords

See your link here


John Traenkenschuh's picture
John Traenkenschuh

The Security Forest in the Corporate Trees

They stumble that run fast

As you'll read in my bio, I work at a large company.  I've been a system administrator, an application administrator, a network administrator, etc.  I'm also a security analyst who must track vulnerabilities in a lot of technologies.  Maybe that explains why I don't see the Zune debacle as anything special. I've got lots of stories of time-based system failures.

Several UNIX versions were ill prepared to handle the changed beginning of the end of Daylight's Savings Time this last fall.  Lots of terrible impacts predicted, but we muddled through it. 

System time is a very, very fragile construct that has big impacts.  Time-sensitive jobs don't spawn.  Logs may not record well.  If mega UNIX systems have issues, do we expect Zune to be spared?

So I don't buy the analysis that throws rocks at Microsoft while neglecting other vendors and their foibles.  And I don't think blaming DRM is necessarily a reasoned approach.  Afterall, if a system is used for websites and if a website has a certificate used for SSL, there will be problems if system time is tinkered with uncontrollably.  Ever try to restart a website that has an 'expired' certificate?  Indeed, how many signed apps run on your PC or mobile clients?  What happens when their certificates are expired artifically?

No, system time is a very special component of overall security.  Don't like the system logs?  Alter the time or time zone and thereby so confuse the record that few conclusions can be reached.

I like my Zune, paid good money for it (but not nearly as much as my iPod Photo 'back in the day').  Is Zune perfect?  Obviously not.  But is it a decent media player?  Sure is. 

If your Zune is such a Piece of Software (I think this is what POS stands for), please advertise it below for $25/US.  I'm sure you'll find some foolish person willing to pay all that for something that is obviously no good.  You might have to pay shipping though.

Or maybe you'll trade me your Zune for my iBook battery that would burst into flames, maybe trade for my Mac drives that would go into stiction mode from time to time?  Or maybe some Dell parts I have find your interest? No, all equipment and all software have issues from time to time.  

jt

What People Are Saying

It was the failure of MS, not the Zune

What astounded me was the way that Microsoft bungled the response. On the Zune FAQ page, there was no expression of sympathy or regret. More importantly, there was no apology.

There was no promise to release software to address the problem so that it does not occur again in 4 years (yes, there will still be people using those same Zunes then, too.)

Microsoft did not offer those affected any compensation -- not even a free download of some music. No trade-in offers for Zune 30 owners. No warranty extension. Nothing.

Microsoft's basic answer was a multi-hour discharge/wait/recharge procedure that reduced battery life and left those users without backups of the DRM content with no access to that content.

Some desperate users had removed their batteries to fix the problem. Microsoft used this opportunity to chastise them: "doing so will void your warranty."

Would you tolerate this kind of treatment if the problem had been with your car, refrigerator, microwave oven, or toilet? Of course not.

Interesting comment

You raise some points that I hadn't considered, and I thank you for taking the time to leave a comment.

I have an iPod also and a lot of experience with them. Remember how the early models had batteries that had little hang time? I also remember their DRM servers failing after a lot of traffic during a really busy Christmas season.

My point? Software doesn't have the sort of contractural obligations thatother products have. But you raise an intriguing point: as our infrastructure gets increasing computing intelligence thanks to growing embedded sophistication, we need to consider the impacts of failures like these I mention.

It's my understanding that a European car manufacturer has implemented a peer-to-peer network amongst its vehicles. This allows one car to alert others to slick spots. Will there be adequate authentication and authorization provided to network devices or will this be like the Internet itself, based primarily on broadcasts that are believed without any scrutiny? Will embedded developers learn from the PC developers experiences?

Keep writing, anonymous responder, there's a lot to consider.