Bonum Certa Men Certa

Bill Gates Admits Microsoft's Failure in Security, Gears Up for DRM

You got mail



PREVIOUS POSTS in this series include:



We carry on with the Comes 'treasure trove' as we continue to pull dark secrets from within Microsoft's internal communication.

Different response from the last one appears in relation to the Intel/Microsoft report in Exhibit px06568 [PDF] (redone with full text [PDF]). Together, these show the responses to a meeting between Microsoft and Intel and going through these chronologically we have:

From: Bill Gates [to=microsoft/ou=northamerica/cn=Recipients=1648] on behalf of Bill Gates Sent: Sunday, March 07, 1999 11:35 AM To: Marshall Brumer Cc: Jim AIIchin (Exchange) Subject: RE: MS/Intel Executive meeting notes - 3/3/99 - Santa Clara, CA Sensitivity: Confidential

I thought they would love the PAE stuff. We need to get them excited about it.

We should get to the bottom of this quick. I thought this was a way we would work together more closely and do things with ISVs.


The same report also appears in Exhibit px06569 [PDF]. It contains another Bill Gates remark about DRM, which Microsoft likes. This remark came just 4 minutes later:

From: Bill Gates [to=microsoft/ou=northamerica/cn=Recipients=1648] on behalf of Bill Gates Sent: Sunday, March 07, 1999 11:39 AM To: Marshall Brumer Cc: Jim Allchin (Exchange); Eric Rudder; Butler Lampson; Anthony Bay (Exchange); Mike Porter Subject: RE: MS/Intel Executive meeting notes - 3/3/99 - Santa Clara, CA . Sensitivity: Confidential

I don’t understand the security disconnect at all. Why would our goals be different?

I know we have failed to have an overall view of security and security APIs and its a mess with certs in some places and other approaches elsewhere.

However we are forced to get our act together because of the Digital Rights Management issues, How can Intel see it differently?


There are two points worth paying attention to:

  1. Gates says: "I know we have failed to have an overall view of security and security APIs and its a mess with certs in some places and other approaches elsewhere."
  2. DRM is mentioned in relation to security, so disasters like Windows Vista immediately spring to mind.


Gates was also meeting Intel's management and inquiring about IP issues with Jim Allchin and Paul Maritz inside his circulation (c.f. Exhibit px06462 [PDF]). The text is all there in the PDF, but there is nothing particularly malevolent in it as far as Linux is concerned.

A real 'dynamite' anti-Linux exhibit we shall cover next (probably tomorrow).




Appendix: Comes vs. Microsoft - exhibit px06568, as text










From: Bill Gates [to=microsoft/ou=northamerica/cn=Recipients=1648] on behalf of Bill Gates Sent: Sunday, March 07, 1999 11:35 AM To: Marshall Brumer Cc: Jim AIIchin (Exchange) Subject: RE: MS/Intel Executive meeting notes - 3/3/99 - Santa Clara, CA Sensitivity: Confidential

I thought they would love the PAE stuff. We need to get them excited about it.

We should get to the bottom of this quick. I thought this was a way we would work together more closely and do things with ISVs.

--Original Message-- From: Marshall Brurner Sent: Thursday, March 04, 1999 10:50 AM To: Jim AIIchin (Exchange); David Cole; Paul Gross (Exchange); Frank Artate (Exchange); Carl Stork (Exchange); Brian Ball (Exchange); Bill Veghte; Tom Phillips (Exchange); Jim Ewel; Harel Kodesh Cc: Bill Gates; Steve Ballmer; Paul Maritz; Bob Herbold; Marshall Brumer, Mike Porter Subject: MS/Intel Executive meeting notes - 3/3/99 - Santa Clara, CA Sensitivity: Confidential

Microsoft/Intel Confidential Executive Summary

We met with Intel today to continue our executive roadmap disclosures and to discuss current high level issues between the companies. This meeting followed a Win64/IA64 meeting also held at Intel that either OnLee or MikePo should be sending notes on.

The roadmap details are below and slides should put up on http://msintel as soon as we have them from Intel. Intel roadmap highlights include:

* Mainstream/ServerWorkstation lines will be >600 MHz by EOY99 and all hit 1GHz in 2000.

* Value line at 500 in 99 and 600 in 00.

* Mobile > 600 in 99 on .18micron up to 7xx in 00.

* Intel’s process technology now on a 2 year treadmill vs 3+ years in the past.

* Biggest hole is lack of Willamette details that we will work to rectify in next 1-2 weeks.

Prior to MS presenting our overall plans for Windows 2000, Windows 98 and Windows CE, Jim briefed the group on overall picture of an upcoming MS reorg that includes him taking over the executive role in the Intel relationship.

Key issues discussed include:

* Server working relationship - how to better engage one another in this space for positive customer oriented results. Brian Ball introduced and tasked here with driving for good results with Intel in this space, There is much we can do here with renewed focus on working together at both companies.

* Value Platforms’ aka ’internet Appliance’ - Pat is very concerned that we need to create an offering in this space.We had a broad discussion about what this actually meant and did not really bottom out. Jim viewed this area as the NC all over again in the consumer/internet space. We agreed to get together with David Cole owning the MS thinking on this.

* Security - We have been stuck in this area for a while. We are working to setup a meeting that is basically a go/nogo meeting to identify the areas we can/will work with Intel on and move forward. They goal is to cut through some of challenges in this area in one giant step and move on.

* Driver Signing at Intel - Intel is creating a large focus behind drivers and driver quality. They are creating a completely separate organization to create/test drivers outside the silicon groups to better align the driver goals with quality rather than silicon schedules. We are supporting their efforts and working on a plan to let Intel self sign their drivers over the long run.

* Details, action items and attendees below. Please send me mail if I got any of this wrong. Thanks!

Details Intel Architecture Road map

* Server/Workstation - P3Xeon>600Mhz in 99 up to 700Mhz by EOY99, Foster 1 GHz in 00




* Mainstream - P3>600MHz in 99, Wiltamette 1GHz in 00. Willamette announce Q2/3 at 1GHz with new instructions. We need to get the info on these instructions in house as some of this is new here (especially timeline and that this is now mainstream, not just workstation).

* Value - Celeron at 500MHz in 99, Timna at 600MHz in 00.

* Mobile - P3>600Mhz in 99, Mobile-coppermine at 7xx/600Mhz in 00, Timna at 533 in 2000..18 micron 2Q99 with P2 then into P3 in 3Q99 - First .18 micron from Intel is in Mobile.

* A bit further out in the value line, Intel showed Coppermine128, Timna, then Pinecrest in .13 micron through 01 not lots of detail here just faster/smaller.

* A bit further out in the desktop/mainstream line -Willamette through late 00, Northwood at.13 in late 01.

* Further out on Server - Merced 00, McKinley 01, Madison (Perf)/Deerfield (Cost reduced), Yosemite (beyond McKinley going up in peal) and then Gallatin following Foster a bit lower down in the map.

* Intel is now on a 2 year cycle for process technology. They use to be on a 3+ year cycle. They are also starting their Mobile first on the new process when it is first introduced.

* Launches - Merced 3Q00, Foster 3Q00, Willamette 3Q00, McKinely 2Q01. Intel asked for us to be in sync with all these and to deliver SW for them. There is much work to see where these all fit into our roadmaps.

* They touched on wanting complete Geyserviite solution going forward.

* Also noted that they now deliver their four products in parallel. They use to do two lines and are up to four.

Windows Roadmap

Jim started this area off with a description of some upcoming org changes that I will not go into in this mail. Overall, the message was that Jim is now the executive in charge of the Intel relationship at MS. We then presented the Windows 2000, Windows 98 and Windows CE roadmaps and some slides on key features of each. We gave Intel NON-public dates of 4/21 for Beta 3 and 10/26 for RTM. David explained the high-level overview of where we see Win98/Win2000 splitting on consumer and agreed that we will spend more time with Intel on this as we have already done on Win98 OSR1 work.

Server Strategy Discussion.

John Miner presented a number of slides on the Server space and how Intel views this space. This was to get us into a discussion on how to work better in this area. There have been some good and bad experiences here and the goal was to get us moving forward more broadly. Brian Ball (welcome!) was named as the MS person to work more closely with Intel on this front.

Their view in this area has changed from 95-98 scaling up and growing the market in the corporate world to 99-xx focusing on Comm/ISP servers beyond the standard model we have today. They want to scale from top to bottom in the standard space and grow into the Comm/ISP world. They have spent a bunch of time with ISPs (8000 surveys with 5000 ISPs) helping them form this mindset and now are asking us to engage with them in this. We should note that they have already started much of this and did that with other OS folks and seemingly came to us late, but they are now seeming to be interested in making this happen MS/Intel wise - we need to engage on that to determine real plans here.

Some specific areas they are working on: * IA64 Developer Implementation Guide - This is sort of turning our Server Design Guide around on us. Our guide (jointly authored with Intel) is a Windows focused guide telling folks how to build HW. They want a guide that is IA64 focused telling folks how to build SW/OSes/Peripherals and probably systems. We need to learn more in this area and then determine if this is something we want to get involved in as it levels the playing field for the OS side of things while using our input to do it.

* NGIO - Much has transpired on this in the past 1-2 weeks, Intel has made drastic changes to the licensing model and the openness of NGIO that is positive for MS and for the industry. MS has agreed to join both NGIO and Future IO groups and we are now in the process of crawling through the NGIO agreements to make sure this is truly something we can sign up for. We also agreed to put out our IO architecture requirements doc by the end of March.

* Note that they have not bottomed out with Future IO folks so there still looks to be two of these. Tom made clear here that we still have a goal of seeing there only be one architecture here and that we would be interested in helping make that happen. Miner stated that there are already 4 companies trying to accomplish this and adding a 5th would not be of any help.

* PAE - We are already pushing this a bunch and surprised by them not being happy about it. We will spend more time with Intel on this one.

* 8-way optimized benchmarks - Again, we need to get more tied into this one. Both sides are spending time here and just need to be in sync and see what we can leverage by working together. Intel has created the Intel 64 Fund to accelerate the completion of solutions for Merced. This fund is targeted to be $200M with money from Intel, 3-5 OEMs, and some early adopter end users corporations. The fund is targeted at startups rather than existing companies that would be approached via normal (evangelism style) channels. The focus




is on creating solutions for shrink wrapped OSs (like NT) not for proprietary Unix's. This is a creative idea that folks at MS are already discussing in other mail.

We bottomed out in this discussion agreeing that there was much we could work on together going forward and that we would strengthen the relationship here with Brian now driving on our side. We will also stretch this more into the marketing space going forward.

Value Platforms aka Internet Appliance discussion:

Intel is concerned that ’we’ are missing the boat in the value platform area down at the ’Internet Appliance’ offering. Pat is the one who is very charged up over this. He sees us completely missing the boat with both the IA architecture and Windows being of no value here unless we move the PC down into that space (rather than what is currently happening with other platforms moving up into that space.)

The product they envision is for mail/browse/commerce. Jim asked Pat what they actually wanted us to do. Pat said ’make significant progress against - Ease of Use, Stability, Price and Simplicity to meet the needs for 2H00’. They talked about this being a Windows 98 based appliance platform. They could not articulate broadly beyond that it was OEM only and aggressively legacy reduced and had a hard time answering David’s question of what would you take out of the PC to make this thing work. Jim made dear that if this is truly a fixed function type device then there is not point in doing the work from Windows as it is not a PC nor will it be.

Jim’s position is that this Is the NC all over again in the consumer space. Most folks in the room agreed with this thinking and that since we had handled this before ala NetPC, that we could do this again. There is more work to be done here and David agreed to drive the thinking at MS and work with the right folks at Intel to explore this area. I will work with Dan Russell at Intel to get the joint parts of this going.

Security Discussion:

There was a short discussion of the challenges we have had on working together in Security, Their opening slide was ’Security - Collaboration or Collision’, This was a useful discussion to educate execs on both sides of what has been happening.

Our fundamental sticking points are around how we look at the space. We firmly believe that we need to get ubiquitous core support to get Content to be authored for the PC rather than closed boxes and Intel does not see it this way. Based on this fundamental disagreement, we are stuck on how to make the core part ubiquitous.

Intel believes that they are more engaged with the consumer folks than MS (ala 5C) and thus we don’t get the picture.An interesting point in their view is that they are only protecting content as it comes into the PC (via some wire like 1394), they are not worried about the content once there. We stated that there are many ways to get the content and it must be protected once on the PC. Thus they think they can get good enough security above the CPU/OS rather than at it’s core and we disagree. This is a good place to start our discussions going forward with Intel to see how to resolve this area.

The timing issue (not just ubiquity, but timing for getting things going) was another issue based on Intel’s waterfall model. We understand and can agree to the Intel waterfall model, but cannot agree that all this must wait 18-36 months to be in all CPUs and shared across to other vendors.

The other sticking point has been that Intel is not comfortable having a discussion with us under our standard CITA terms or under extended CITA terms that would give them MORE rights to also build what they need in SW. They are saying that they are not interested in signing away all their IP before even coming to the table here. Note that this is a fundamental change to how we work together with Intel and is something that we need to address going forward as it will surely come up again. Our current solution is to have a meeting that is not covered by CITA that will mainly map out all the areas in this space that we could play together, identify the areas that we will and will not engage and then cover each of the engaging areas under CITA and get to work.

We are working to setup a meeting with Intel with the goal of coming out of the meeting with a map of what we will and will not engage Intel on.

Driver Signing Discussion:

Intel wanted to stress to us their commitment to better drivers and ultimately being able to test and sign their own drivers. They are building up a huge number of people (~450) to work in this area. These folks include a driver software quality tab, platform driver quality lab and software qualification process team. Overall, the broad goal is to do driver development completely separate from silicon development so the goals of the driver folks are not put second to the goals of the silicon guys. At Intel, this means that the driver guys having a quality goal rather than a ship date only goal. This is good for us and good for Intel.

WHQL is working on a plan with Intel to implement this and things are looking good. The only real sticking point is




what happens to Intel if they sign a driver that really should be failing. MS wants to reserve the right to pull the signature and Intel does not want this to ever happen. We will clearly revisit this issue, but still need to make this happen going forward.

We also need to make sure that part of the process at Intel is to always be in sync with the development group within MS that is shipping the OS the driver supports. We cannot afford to have Intel doing their work and just sending us a ’completed’ driver at the end of the process. Intel agrees with this and we will drive to make sure this is part of the process.

IDF and WinHEC Alignment:

We did not bottom out in this area. More work in a smaller group to happen here.

Action Items

* Drive disclosure on Willamette new instructions and then followon for all new CPUs - Mike Porter.

* Followup on Server joint work - Brian Bail/Jim Ewell/Mike Porter.

* Get Intel 2x2 for 00 consumer and business desktop - Intel/Mike Porter.

* Drive value platform/Internet appliance discussion - Marshall Brumer/David Cole.

* Drive closure on security discussions and next steps - Marshall Brumer.

Attendees Intel: Pat Geisinger Albert Yu John Miner Bob Jecman Dan Russell Fred Pollack Jean McNamara Richard Wirt Frank Ehrig Mike Webb Others

MS Jim Allchin David Cole Paul Gross Frank Artale Carl Stork Brian Ball Bill Veghte Tom Phillips Jim Ewel Jeff Havens Mike Wehrs Marshall Brumer Mike Porter

MS01 0049153

HIGHLY CONFIDENTIAL






Recent Techrights' Posts

Free Software Foundation Subpoenaed by Serial GPL Infringers
These attacks on software freedom are subsidised by serial GPL infringers
Publicly Posting in Social Control Media About Oneself Makes It Public Information
sheer hypocrisy on privacy is evident in the Debian mailing lists
 
Links 01/05/2024: Surveillance and Hadopi, Russia Clones Wikipedia
Links for the day
Links 01/05/2024: FCC Takes on Illegal Data Sharing, Google Layoffs Expand
Links for the day
Links 01/05/2024: Calendaring, Spring Idleness, and Ads
Links for the day
Paul Tagliamonte & Debian: White House, Pentagon, USDS and anti-RMS mob ringleader
Reprinted with permission from disguised.work
Jacob Appelbaum character assassination was pushed from the White House
Reprinted with permission from disguised.work
Why We Revisit the Jacob Appelbaum Story (Demonised and Punished Behind the Scenes by Pentagon Contractor Inside Debian)
If people who got raped are reporting to Twitter instead of reporting to cops, then there's something deeply flawed
Red Hat's Official Web Site is Promoting Microsoft
we're seeing similar things at Canonical's Ubuntu.com
Enrico Zini & Debian: falsified harassment claims
Reprinted with permission from disguised.work
European Parliament Elections 2024: Daniel Pocock Running as an Independent Candidate
I became aware that Daniel Pocock had decided to enter politics
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Tuesday, April 30, 2024
IRC logs for Tuesday, April 30, 2024
[Meme] Sometimes Torvalds and RMS Agree on Things
hype around chatbots
[Video] Linus Torvalds on 'Hilarious' AI Hype: "I Hate the Hype" and "I Don't Want to be Part of the Hype", "You Need to Be a Bit Cynical About This Whole Hype Cycle"
Linus Torvalds on LLMs
Colin Watson, Steve McIntyre & Debian, Ubuntu cover-up mission after Frans Pop suicide
Reprinted with permission from disguised.work
Links 30/04/2024: Wireless Carriers Selling Customer Location Data, Facebook Posts Causing Trouble
Links for the day
Frans Pop suicide and Ubuntu grievances
Reprinted with permission from disguised.work
Links 30/04/2024: More Google Layoffs (Wide-Ranging)
Links for the day
Fresh Rumours of Impending Mass Layoffs at IBM Red Hat
"IBM filed a W.A.R.N with the state of North Carolina. That only means one thing."
Workers' Right to Disconnect Won't Matter If Such a Right Isn't Properly Enforced
I was always "on-call" and my main role or function was being "on-call" in case of incidents
Mark Shuttleworth's (MS's) Canonical is Promoting Microsoft This Week (Surveillance Slanted as 'Confidential')
Who runs Canonical these days? Why does Canonical help sell Windows?
A Discussion About Suicides in Science and Technology (Including Debian and the European Patent Office)
In Debian, there is a long history of deaths, suicides, and mysterious disappearances
Federal News Network is Corrupt, It Runs Propaganda Pieces for Microsoft
Federal News Network used to be OK some years ago
What Mark Shuttleworth and Canonical Can to Remedy the Damage Done to Frans Pop's Family
Mr. Shuttleworth and Canonical as a company can at the very least apologise for putting undue pressure
Amnesty International & Debian Day suicides comparison
Reprinted with permission from disguised.work
[Meme] A Way to Get No Real Work Done
Walter White looking at phone: Your changes could not be saved to device
Modern Measures of 'Productivity' Boil Down to Time Wasting and Misguided Measurements/Yardsticks
People are forgetting the value of nature and other human beings
Countries That Beat the United States at RSF's World Press Freedom Index (After US Plunged Some More)
The United States (US) was 17 when these rankings started in 2002
Record Productivity and Preserving People's Past on the Net
We're very productive these days, partly owing to online news slowing down (less time spent on curating Daily Links)
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Monday, April 29, 2024
IRC logs for Monday, April 29, 2024
Links 30/04/2024: Malaysian and Russian Governments Crack Down on Journalists
Links for the day
Frans Pop Debian Day suicide, Ubuntu, Google and the DEP-5 machine-readable copyright file
Reprinted with permission from disguised.work
Axel Beckert (ETH Zurich), the mentality of sexual violence on campus
Reprinted with permission from Daniel Pocock
[Meme] Russian Reversal
Mark Shuttleworth: In Soviet Russia's spacecraft... Man exploits peasants
Frans Pop & Debian suicide denial
Reprinted with permission from disguised.work
Hard Evidence Reinforces Suspicion That Mark Shuttleworth May Have Worked Volunteers to Death
Today we start re-publishing articles that contain unaltered E-mails
The Real Threats to Society Include Software Patents and the Corporations That Promote Them
The OIN issue isn't a new one and many recognise this by now
Links 30/04/2024: OpenBSD and Enterprise Cloaking Device
Links for the day
Microsoft Still Owes Over 100 Billion Dollars and It Cannot be Paid Back Using 'Goodwill'
Meanwhile, Microsoft's cash at hand (in the bank) nearly halved in the past year.
[Teaser] Ubuntu Cover-up After Death
Attack the messenger
The Cyber Show Explains What CCTV is About
CCTV does not typically resolve crime
[Video] Ignore Buzzwords and Pay Attention to Attacks on Software Developers
AI in the Machine Learning sense is nothing new
Outline of Themes to Cover in the Coming Weeks
We're accelerating coverage and increasing focus on suppressed topics
[Video] Not Everyone Claiming to Protect the Vulnerable is Being Honest
"Diversity" bursaries aren't always what they seem to be
[Video] Enshittification of the Media, of the Web, and of Computing in General
It manifests itself in altered conditions and expectations
[Meme] Write Code 100% of the Time
IBM: Produce code for us till we buy the community... And never use "bad words" like "master" and "slave" (pioneered by IBM itself in the computing context)
[Video] How Much Will It Take for Most People to Realise "Open Source" Became Just Openwashing (Proprietary Giants Exploiting Cost-Free or Unpaid 'Human Resources')?
turning "Open Source" into proprietary software
Freedom of Speech... Let's Ban All Software Freedom Speeches?
There's a moral panic over people trying to actually control their computing
Richard Stallman's Talk in Spain Canceled (at Short Notice)
So it seems to have been canceled very fast
Links 29/04/2024: "AI" Hype Deflated, Economies Slow Down Further
Links for the day
Gemini Links 29/04/2024: Gopher Experiment and Profectus Alpha 0.9
Links for the day
[Video] Why Microsoft is by Far the Biggest Foe of Computer Security (Clue: It Profits From Security Failings)
Microsoft is infiltrating policy-making bodies, ensuring real security is never pursued
Debian 'Cabal' (via SPI) Tried to Silence or 'Cancel' Daniel Pocock at DNS Level. It Didn't Work. It Backfired as the Material Received Even More Visibility.
know the truth about modern slavery
Lucas Nussbaum & Debian attempted exploit of OVH Hosting insider
Reprinted with permission from disguised.work
Software in the Public Interest (SPI) is Not a Friend of Freedom
We'll shortly reproduce two older articles from disguised.work
Harassment Against My Wife Continues
Drug addict versus family of Techrights authors
Syria, John Lennon & Debian WIPO panel appointed
Reprinted with permission from disguised.work
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, April 28, 2024
IRC logs for Sunday, April 28, 2024
[Video] GNU and Linux Everywhere (Except by Name)
In a sense, Linux already has over 50% of the world's "OS" market