Do you have any information about how EU's initiative for investigation of Media Player started, since the whole case begun with Sun's complains on networking problems? Was it EU that noted this or someone else?
I was not involved at that stage, so I am no eyewitness of it. As far as I can tell from the documents, it was a "motu proprio" initiative of the Commission. In antitrust cases, the Commission has the right to initiate investigation also out of an informal complaint or even in case during its review of the market it finds infringements to the law.
What was Microsoft's strategy? How did the company defend itself in this case?
That is complicated. The general strategy appears to me, frankly, to be a damage control and delay one. They have hired possibly the best representation money can buy in Europe, people that have made the history of EC law. Luckily also on our side of the wall there was no shortage of brilliant and prepared minds. So the strategy was well served by a good display of tactical maneuvers to make the case as complex and costly as possible. The sheer volume of the paperwork is itself staggering: it takes almost a scaffold in my office. But I must also say that the opponent was reasonably fair in avoiding dirty tricks and ambushes.
The central point of the legal defence, at least in the interoperability case, was "intellectual property", meaning mainly trade secret and patents, but also copyright to some extent. Microsoft said that it invested a considerable amount of resources to invent new products and technology which are invaluable, and by releasing the information according to the requirements of the challenged decision would have allowed others to "clone" their products and in general to take a free ride on their inventions.
A quite spectacular defence was that about security. Basically it said that, unlike the Internet protocols, those keeping together a Microsoft work group network were so conceived that the all the servers acted as if they were a single distributed entity. In other words they were "tightly coupled", closely knitted together so that any intrusion from the outside, a drop-in replacement pretending to be a Microsoft Windows server could cause irreparable harm and all sort of nefarious problems. Besides, disclosing the specifications of their protocols would have required a hardening of the protocols, in order to make them resistant to malware attack or simply of badly designed third-party software which could have compromised the whole infrastructure.
But nothing was more shocking to me than hearing that they could not release the specifications because... they do not exist. They had to call back retired engineers or scroll through millions of lines of source code to find out what the heck they have done with the protocols.
Part of our value added in the case was to show how this all was nonsense. For the first part, our lead tune was "this stuff is not secret because valuable, but valuable because secret". Actually it is just a relatively thin proprietary layer of extensions to publicly available protocols and well understood techniques. At most, good engineering, but hardly any innovation if compared with existing implementations of the same protocols.
As the "tightly coupled" defence, the Samba guys were well positioned to rebut. Samba is quite a good piece of software, provided how it has worked out interoperability with Windows. So good that Microsoft itself used it as a reference implementation for the WSPP, the licensing scheme it has offered as a compliance to the remedies. And even without fully having understood all the idiosyncrasies of Microsoft's protocols it does not cause much disruption if used along with Windows servers. And I will not comment much further about the need to harden the protocols, as any reader could take the appropriate conclusion without me explaining how security through obfuscation is a false way of achieving security, and that malware makers surely do not need fully licensed specifications.
ScrumMaster offers tips on how to play in a winning dev team
How spyware nearly sent a teacher to prison
Open source identity: Asterisk founder and Digium CEO Mark Spencer
Fighting e-waste one mobile phone at a time
MIT's JoAnne Yates on information overload, 'CrackBerry' addicts and the 'always online' life
- +
Blog: Maintenance - Letting Go Of The M-Word 09/01/2008 12:58:42
We've probably all seen the IT iceberg, the one with new projects rising majestically above the water line - and application maintenance submerged in the murky depths below. Well, since global warming is busy melting the icebergs up north, I hope it will soon come along and melt this particular one too.
Read up on the latest ideas and technologies from companies that sell hardware, software and services. How to improve employee productivity in small and medium businesses
Gaining Competitive Advantage Through Enterprise Planning
Achieving the impossible: Unlimited application scalability
Best Practice in Building an Integrated Information Management Strategy
Taking On Demand CRM Integration to the Next Level
Email Archiving Implementation: Five Costly Mistakes to Avoid
Data grids and service-oriented architecture
Strategies for Eliminating .PST Files
Zones provide focussed content from Computerworld and leading technology partners.Discover how SOA can create smarter outcomes for your business.
Attend and learn:
- How SOA is helping leading companies to become more agile
- Where you should be applying SOA processes in your company
- The top SOA implementation mistakes to avoid
Click here for more information.
- +
Computerworld Live Podcast #97: The Future of Enterprise Networking 25/07/2008 09:45:36
This week CW Live chats with Mark Thompson, global sales and marketing manager for HP ProCurve, on the future of the enterprise networking. Mark discusses the trends we can expect to see in the near future and how the right infrastructure can ensure your enterprise network is secure. - +
Computerworld Live Podcast #96: Security at the Edge 11/06/2008 09:22:22
CW Live speaks with Amol Mitra, HP ProCurve Director of Marketing for Asia Pacific and Japan. Today's topic: how enterprises are starting to shift away from simply controlling security via server logins, firewalls and moving to more adaptive security frameworks. - +
Data Management Edition #10: Multi-Petascale Systems 02/05/2008 09:12:33
This week we look at sustainability and the development of multicore technologies to build multi-petascale systems. - +
IT Security Edition #11: How to poison the Storm botnet 01/05/2008 08:51:55
This week CW Live presents a case study on how to poison the notorious Storm botnet . Plus we take a look at Cisco's plans for Ironport. - +
IT Security Edition #10: Cyber-battles fought and won 24/04/2008 11:09:47
Vendors bow to end user pressure to improve product security, and we take a look at the latest concepts shaping the cyber-battlefield of the future.
AARNet Helps to Advance Indigenous Health 2008-12-02 12:44:00+11
Orbis selects Telstra International as its data centre partner for the UK, Europe and Middle East Region 2008-12-02 11:23:00+11
ComOps Deploys Corporate Performance Reporting Solution For Healthcare Test Manufacturer 2008-12-02 10:09:00+11
Mornington Peninsula Shire implements Objective to manage knowledge and deliver service excellence 2008-12-02 09:56:00+11
Virtual magic: HR specialist throws out 40 servers, adds 8TB SAN and saves $100,000 for disaster recovery 2008-12-01 15:28:00+11
Wireless LANs: Is my enterprise at risk?
Achieve an overall understanding of the risks associated with wireless LANs. Discover their inherent properties, as well as what makes them different from wired networks. Read on to uncover a list of recently published articles on real-life breaches and incidents illustrating the need for proactive measures to mitigate wireless security risks.












