-
Intel buying McAfee – the rest of the story
Posted on August 19th, 2010 at 21:42 2 commentsMy blog on InfoWorld Tech Watch about the acquisition should be up shortly. [UPDATE: See Is Intel buying an also-ran?]
There’s more to the story. A good friend of mine, Rob Rosenberger, has been writing about McAfee’s shenanigans with the Chinese government for almost a decade now. Check out Rob’s summary post about the whole sordid affair, which he calls The China Syndrome.
Rob wrote to me just a few minutes ago, with even more revelations. I don’t have any way to verify what he says. But I do know that in more than a decade of writing with and about Rob, he’s never steered me wrong.
Rob has confirmed to me that Jimmy Kuo was the “antivirus industry’s diplomat to China. He works for Microsoft now, but back then he was the senior antivirus researcher at McAfee.” Rob revealed that Jimmy called him twice “in a fit of deep remorse” looking for Rob to “absolve” him.
“Kuo soon got over his remorse,” Rob told me. “We know this because he didn’t stick a gun in his mouth.”
Rob is no ordinary antivirus expert. By his own admission, he has been “floating in and out of” the U.S. intelligence community since 1982. I asked Rob what he thinks is the long term fallout from The China Syndrome. He said “The Defense Department failed to remember a very valuable lesson. Our troops rely 100% on antivirus software written by companies that secretly armed America’s enemies. Yet a few months ago, the Air Force Chief of Staff shook hands with McAfee and told everyone ‘these guys will protect our troops in the cyber realm and we’ll rely on McAfee to provide us the cyber intelligence we need,’ even though their intelligence officials hid their own shenanigans from Defense officials.”
There is a bright spot in all this, says Rob. “Howard Schmidt is at the White House again; he understands the national security threat posed by McAfee and Symantec and, yes, Microsoft where Kuo now works.” I know Rob had Howard’s ear when he was the top security manager at Microsoft.
It’s only fair to believe that he still has Howard’s ear at the White House.
2 responses to “Intel buying McAfee – the rest of the story”
-
rc primak August 20th, 2010 at 00:35
It’s fun to engage in wild-eyed “exposes” using old news stories and now-ancient rumors about Chinese (or North Korean) “conspiracies” with (or against)Google, Intel, Yahoo, or your choice of anti-virus companies.
But let’s focus on real-world consumer and business patching issues here, Woody. Neither you nor I can possibly believe that our Federal Government has been infiltrated by Cyber-Spies at the highest levels, and that US Intelligence Agencies knew nothing about it for over thirty years.
The “Wild List” your friend and you speak of, is older than the hills, and does not contain anything not known to any IT Professional or Security Professional who subscribes to the Wild List. (And there are no Background Checks required to subscribe to it.) This is hardly a secret of Classified piece of virus Intelligence. And I note that the timeline ends in 2002 — an eternity in Intelligence, Counter-Terrorism, and IT security.
This story does not pass the Smell Test. It is only another screaming headline about something which has had no impact whatsoever on National Security, in spite of what a few bloggers, yourself included, may try to mislead the Public into fearing. We have enough crackpot Conspiracy Theories running around without any Windows Experts adding unnecessary weight to any of them.
For the average home or business user, there is nothing whatsoever in this “report” upon which anyone can take any actions whatsoever to protect ourselves. The whole thing sounds like just more Bashing against your favorite anti-virus Whipping Boys.
Enough, already — let’s get back to some real work around here!
-
rc primak August 20th, 2010 at 01:31
Getting back to the Intel acquisition of McAfee, let’s be clear about one thing. Putting a logo on a chipset saying “McAfee Inside” does NOT lock us into only using McAfee security software on that computer. What is being discussed is chipset hardening against the growing threat of Firmware WORMs and their ilk.
A chipset does not contain enough addressable memory to put a full-blown AV app onto the chipset, let alone to update it and run scans on the computer or its software and data files. This arena will remain wide-open for all competitors for the foreseeable future.
This hardening will be useful for protecting devices which do not have user-accessible programs, such as Network Cards, game boxes, and other hardware which has firmware but is not user-configurable. And in this arena, it may be impossible to go any other way than to standardize on one set of algorithms, due to on-chip storage space limitations and other technical issues. Hence, security from only one vendor.
Again, there’s no conspiracy here, folks.
Leave a reply
-


