Welcome to MSDN Blogs Sign in | Join | Help

Randy Holloway at Microsoft

Blogging from the field.
More on the Microsoft Critic Firing Story

Here's an update to my post yesterday about the security researcher that was fired by @Stake for participating in a report that was critical of Microsoft. 

Now that I've read the report, I'd like to comment further.  The report in question lacks merit in my opinion.  My reasoning is that the reports cites the "monoculture" that results from most of the world's PCs running a Microsoft operating system, and thus being vulnerable to the same security holes and viruses at the same time.  The alleged Microsoft monopoly is cited as the main cause for this risk and the report claims that this monopoly must be dismantled to fix the problem.  I believe that better product quality can resolve this problem, I don't see the alleged monopoly as a major factor.  In addition, by following the paper's reasoning many products that are based on common standards or specifications would all be subject to the same risk.  That would mean much of our basic infrastructure, including power generation, telecommunications, and other important systems could all be equally vulnerable.  I don't think that's the case however.  Many of those systems are much more reliable than computers or computer networks based on procedures and safeguards that have been put in place over many years.  Sure, things fail from time to time.  But those failures tend to be isolated in scope and tend to be resolved fairly quickly.  When situations arise that are more serious, smart people go back to these systems, procedures, and safeguards and make changes.  I don't think computing is any different.  Systems need to be secured and safeguards to prevent widespread failure need to be put in place, but having many of the world's computers using a single operating system isn't a barrier to having a stable computing infrastructure.

In addition, I've noticed that any time the "M" word (monopoly) is used in reference to Microsoft, tempers start to flare and people get emotional.  I'll try to avoid that behavior, but I've noticed something interesting that I wanted to point out.  I think everyone can agree that a violation of law related to a monopoly cannot be cited as a moral or ethical lapse.  The concept of monopoly regulation has been introduced as a market protection.  It is not part of our "moral" foundation as a society that can be traced back to religion and cultural traditions.  Those traditions universally agree on many basic concepts dealing with "morality", condemning activities such as stealing, hurting or killing people, etc. I think that most reasonable people can agree on this fact.  What is interesting to me is that many of the people that complain about Microsoft's monopoly are the same ones that tend to dismiss copyrights and intellectual property in general.  Aren't IP laws and copyright protections similar to monopoly regulations in many ways?  Aren't they morally equivalent in many cases?  Is a regulation that restricts a company's behavior in the marketplace and their ability to maintain a certain level of market share through the use of competitive business practices any more or less valid than one that imposes restrictions on how I use a book or a CD (or software) that I've purchased.  I think the intellectually honest people out there will agree- the answer is probably no, there is little or no difference.  So for those of you that complain about Microsoft's alleged monopoly and want the government to dismantle the company or penalize them but also complain about intellectual property and copyright regulation, you should consider the contradictory nature of your positions.

Posted: Friday, September 26, 2003 4:08 PM by RandyHolloway

Comments

Daniel O'Connell said:

While reading this report, some things strike me.
They don't bother to mention the various OpenSSL flaws that cross systems anywhere I've read to at this point.
What they see as integration for monopolic services, I see as additional services for the user.
The theory that Microsoft should not be allowed to release a version of Office for windows until a Linux or MacOS X version is a horrifying concept in its own.
What if this applied to every software company? What if a feature cannot be implemented across all platforms due to limitations on one? This sounds like a massive move towards ubiquity and the end of innovation to me.

There are some points I agree with, however. Many of the object models are pretty well locked in and can't be replaced. As the era of COM ends, I implore Microsoft to provide a much more open automation and interop interface model.
I don't want IWordDocument any longer. I want IWordProcessor, IDocument, IWordProcessorDocument : IDocument, IMicrosoftWord: IWordProcessor and IMicrosoftWordDocument : IWordProcessorDocument. Similarlly for Excel and any other application that is standard for all systems(down to calc.exe IMHO).

These standard interfaces should be open to all. Common code should be capable of targeting OpenOffice, Microsoft Office, WordPerfect, or any other word processor, even ones that don't support all or even half of Words features. It would be up to individual consumers to provide the proper interface definitions and the coder to provide methods to choose the target, but it shouldn't be up to the consumer to have to have one or the other unless some specific feature was needed.

The technology is really here now, I think, to provide a serious, component based system. A method of plugging in a new spell checker(as well as that spell checker being available to all programs) should be there. Microsoft can continue to sell its spell checker with Office and I for one would probably buy it, its one of the best I know of.
Those kind of things are best for the consumer, the developers, and the company itself.

But will we ever see that...
I don't think we will from Microsoft.
I don't think we will from the *nix community.
I don't think we will from Apple.

Maybe its time for something completely new...How about .NET OS? ;)
# September 26, 2003 4:50 PM

Dave said:

Here's the thing though: in the context and concept of this report MS _is_ monolithic.

Desktop OS is what, 95% WIndows? IE browsers account for what, 55%? Depending one some stats it could be more like %80 or 90%. This report, whatever else it may be saying, is saying that when a security flaw in such pervasively used products comes up... it has a MAJOR impact on things.

Randy, your words "... alleged Microsoft monoculture..." simply paints things improperly. However much you disagree with the author's solutions (I do too and agree verymuch with yours) it simply weakens your argument to use these words like you have. The word "alleged" makes one feel you are defending MS - and there just ain't nothing to defend!

The author was fired for something much different. He released this report publicly without completely following through channels. The critical word here is "publicly". Considering the niche his employer is in, such behavior is easily grounds for dismissal. Nowhere is MS part of the events.
# September 26, 2003 5:28 PM

Randy Holloway said:

Dave, my words are "alleged monopoly", I don't dispute the monoculture. I just question whether or not this issue makes it impossible or even difficult to make computers more secure. I think the answer to that question is no.
# September 26, 2003 5:34 PM

Simon Fell said:

"alleged monopoly" huh?, nothing aledged about it, acording to the courts it is a monopoly.
# September 26, 2003 7:57 PM

Randy Holloway said:

Simon-

Fair enough, there was a finding of fact in the original trial that cited Microsoft as a monopoly. But don't forget that the original federal court decision in the anti-trust case was partially overturned by an appeals court and the case was eventually settled. I think most observers believe Microsoft won the case. But still, I'll make a correction.

http://www.washingtonpost.com/wp-dyn/articles/A54547-2002Nov1.html
# September 26, 2003 8:07 PM

Stu Charlton said:

"I think everyone can agree that a violation of law related to a monopoly cannot be cited as a moral or ethical lapse. "

Absolutely not, and I think this is why people get emotional.

Many people place a lot of emotional emphasis on the products they use. When a monopolist abuses its power to take away their beloved products, that could be considered a breach of ethics. (Otherwise it's just competition, which is still disliked, but tolerated).

"The concept of monopoly regulation has been introduced as a market protection.  It is not part of our "moral" foundation as a society that can be traced back to religion and cultural traditions"

Absolutely not. Read "The Company" by Micklethwait and Wooldridge: http://www.amazon.com/exec/obidos/tg/detail/-/0679642498

Moral distaste for companies and profit making goes back for centuries. It was against papal law to loan money at one point. Remember the "Robber Barons"? How about all the CEO pay scandals recently?

Society is more tolerant for business as it sees the benefits of the free market. But it is still quite intolerant with abuse of power granted through the market (CEO pay, monopoly, etc.). Examples of this are everywhere, even in recent headlines: Sarbanes-Oxley was passed by a "conservative" administration and was the biggest business reform since FDR's new deal... Congress recently stomped on the FCC's attempt to further deregulate the media industry.

You really keep saying , as if you're trying to convince yourself of this, when you already seem to know it's not true because there seem to be so many people that dislike monopolists (and Microsoft).

I'm not sure what you're trying to accomplish by repeating "I think everyone agrees on this fact". It's plainly obvious that there are tremendous difference in opinion on the ethics of monopolistic power abuse.
# September 27, 2003 1:18 AM

Stu Charlton said:

"What is interesting to me is that many of the people that complain about Microsoft's monopoly are the same ones that tend to dismiss copyrights and intellectual property in general.  Aren't IP laws and copyright protections similar to monopoly regulations in many ways?  Aren't they morally equivalent in many cases? "

Firstly, I suggest that you are in error in lumping in everyone that has a problem with monopolistic behavior with the anti-IP crowd. Surely a much wider group of society that has a problem with monopolies than a bunch of computer nerds on Slashdot. The anti-IP crowd isn't even really representative of the open source community (Linus Torvalds is not anti-IP).

Further, there are people that aren't anti-IP but are merely critics of current IP law. Lawrence Lessig, for example, believes in strong copyright laws. He is just views current political climate in granting perpetual copyright extensions as creating countless examples of abuse of government-granted monopoly power by preventing works from entering the public domain.

On to your moral equivalence argument. I'm not quite sure what you mean. IP laws are a way of preserving a temporary legal monopoly. Monopoly laws are a way of dismantling an illegal structural monopoly.

If you're talking about anti-IP people that want to destroy copyright laws, I think it's a bit loonie so I'm not going to address it.

On the other hand, if you're referring to mere IP law critics like Lessig, then there is no inconsistency in these viewpoints. Western society is willing to tolerate monopolies for its benefit, but it is not willing to accept abuse of monopoly power. This is a widespread (but by no means universal) belief.

IP-law critics, a much, much smaller group, are trying to draw attention to the view that we are losing our "creative commons", and cherished set of public domain works, and that current lawmaking is not consistent with the reasoning behind IP law as stated in the constitution.

I'm not actually trying to say who's right or wrong. I'm not quite sure, to be honest. It's still quite debatable whether a "structural" monopoly can exist, and whether the market will fix imbalances in the long run (this is Microsoft's perspsective - they're always in danger of getting toppled by two guys in a garage). The counter to this is the Keynesian-like view that "in the long run we are all dead", and monopoly laws are needed to resolve the situation now, instead of some mythical "long run".

On the other hand, I think IP law critics have a good point in their stance: copyright law is a government-sanctioned monopoly so power imbalances and inefficencies can't be fixed by the market, it can only be fixed through political action.
# September 27, 2003 1:49 AM

Randy H. said:

Stu- thanks for your comments. Many interesting facts that you're citing. I think that your analysis on IP law is not quite correct, but I appreciate your position.

My commentary does tend to generalize a bit- but I think my broad strokes here are accurate for a good segment of the Slashdot crowd and many others. When I state that I think everyone should agree, I think that a persuasive argument can be made to support my position. Maybe not "everyone" would agree, but I think that most reasonable people could see some merit in these positions.

There is a case to be made that this disdain for business and this reverence for competition at the expense of property rights is a relatively new phenomenon and is not core to many of our universal societal values.

Many would argue that no such values exist at all- but at that point there can no longer be a reasonable debate on this subject.
# September 27, 2003 10:39 AM

jon said:

Stereotyping the MS monopoly critics as anti-copyright/patent law anarchists is way off. copyrights, because he thought that knowledge s
Your idea that "reverence for competition" is new, is incorrect. Even Thomas Jefferson, whom the US patent office now regards as their patron saint and founder was opposed to the entire idea of patents andhould be available to all, and should be public domain. When he was elected president and was forced to become more pragmatic, because he saw that patents and copyrights could encourage innoation...but he still insisted on reviewing every patent application personally. Personally, I think Thomas Jefferson would be a Slashdotter of he was alive today.

The whole point is that Capitalism absolutely depends on competition, and from a pure theorhetical point of view, the MS monopoly is bad for a capitalist society, and what I am trying to say is that the sticking point is idealism vs. pragmatism.
Microsoft is the best software company in the world by a long shot, but just because they are great now, doesn't mean we should ignore the foundations of capitalism that our society is built on.

-jon (ran Slackware until Win95b(memphis))

p.s. Forgive typos...2 too many red bull/vodkas ;-)
# September 28, 2003 12:28 AM

jon said:

God...I just read my own crap...I think I'll leave the computer alone for a bit now.
# September 28, 2003 12:36 AM

Cameron said:

Randy: "There is a case to be made that this disdain for business and this reverence for competition at the expense of property rights is a relatively new phenomenon and is not core to many of our universal societal values."

Disdain for business?

Reverence for competition at the expense of property rights?

Randy, you are making stuff up. These are hallucinogenic at best, and purposeful straw men at worst.

IMHO people that find fault with the Microsoft market position generally do so because Microsoft has abused their position, not simply because they attained it. There may be a few people that have complete disdain for capitalism and private property, but even the extremists in open source preach the protection of copyright and the benefits of profit.

In modern western thought, property rights exist for the benefit of society, and governments exist for the benefit of the governed. When Microsoft steals other companies' products and places that code into their operating system, that hardly puts them in the hall of fame for "upholders of property rights". When Microsoft pays or otherwise coerces companies not to do business with its competitors, that is hardly the hallmark of competition or innovation.

Yes, Microsoft has done many great things, and will continue to do many great things, but to turn a blind eye to their anti-competitive and even illegal behavior is frankly an abdication of your social responsibility. To hold a company accountable for its actions is simply being responsible.

Peace.
# October 3, 2003 10:26 AM
New Comments to this post are disabled
Page view tracker