this post was submitted on 25 Mar 2025
132 points (97.1% liked)

Ask Lemmy

30419 readers
1071 users here now

A Fediverse community for open-ended, thought provoking questions


Rules: (interactive)


1) Be nice and; have funDoxxing, trolling, sealioning, racism, and toxicity are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them


2) All posts must end with a '?'This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?


3) No spamPlease do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.


4) NSFW is okay, within reasonJust remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com. NSFW comments should be restricted to posts tagged [NSFW].


5) This is not a support community.
It is not a place for 'how do I?', type questions. If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.


6) No US Politics.
Please don't post about current US Politics. If you need to do this, try !politicaldiscussion@lemmy.world or !askusa@discuss.online


Reminder: The terms of service apply here too.

Partnered Communities:

Tech Support

No Stupid Questions

You Should Know

Reddit

Jokes

Ask Ouija


Logo design credit goes to: tubbadu


founded 2 years ago
MODERATORS
 

Could they do it? Deactivate Windows licenses, block Cloud services, access to Office 365 and whatnot?

you are viewing a single comment's thread
view the rest of the comments
[–] sylver_dragon@lemmy.world 13 points 3 days ago (2 children)

Stopping Windows from running, probably not. MS could stop sending updates and could deactivate it, but it would mostly keep running. And, if any EU/Russian systems were not connected to the internet (yes, this sort of thing still happens in 2025), nothing MS did would matter. Office/Azure and other cloud based services are more vulnerable. Yes, Microsoft could geo-fence those services such that they did nor work if you were coming from an IP address in EU/Russia. Though, the simple workaround for this is to install a VPN. And given US sanctions on Russia, this is probably happening right now anyway.

As much as the tin-foil hat crowd likes to think about MS having some master control switch, it's incredibly unlikely. The problem with backdoors is that hackers are constantly looking for ways to attack systems, especially Windows. If there was some sort of master "off switch" baked into the code, it's likely some one would have stumbled upon it by now. Even if it's that well hidden, it's a "one use" item with high reputational damage attached. Stop and consider for a moment, what happens when that kill switch gets used? It's going to be picked up on. People record internet traffic for fun. As soon as that kill command went out, security researchers, the world over, would be dissecting logs to find the command, and then it would be reversed engineered. That MS had such a kill switch in their codebase would cause massive distrust in MS software going forward. No one would want to take the risk of having that kill switch running in their environment, certainly not on anything critical. Also, given how bad people are at updating Windows, we'd probably see a lot of systems killed by hackers just doing hacker things. Since the versions with the kill code would be know, you'd get bored teenagers searching Shodan for vulnerable systems and sending the kill command for fun. And all of this would be "Microsoft's fault" for having the backdoor. It would be a PR nightmare. And since everyone would now know what the kill command looked like, anyone who mattered would install filters to block it at the firewall. So, it got used once, caused some damage with a lot of damage to MS's reputation but is now neutralized. Was it worth it? Probably not to Microsoft.

[–] Nibodhika@lemmy.world 1 points 2 days ago

I mean, yes, but there are ways around it. Windows could have a public key embebed somewhere and the private counterpart gives access, the command could depend on the time it's received, so it's never the same and without the private key it's impossible to reproduce, and the Killswitch could be non-instantaneous, combine all of that and you have a Killswitch that:

  • It's very hard for you to realize something happened, because by the time it happens the trigger is lost in a sea of other requests
  • Even if you were to fine comb through all of that and spot it, it's encrypted
  • Even if you were to resend it it would do nothing, because the time has changed
  • Even if you managed to find the public key and decrypt it the actual content could be inocuos, like a random looking string
  • As long as the private key is secure enough it would be impossible to crack
  • Even if you somehow managed to crack it and send anything you want to the PC you don't know the protocol to generate the random strings and you only have the one example of the message (which no longer works)
  • Even if several people did this the content could truly be random (in the common sense of the word, i.e. pseudo-random), since Microsoft controls the RNG on Windows they can use that to ensure that random data gets generated equally

And I'm not even a cryptographer, people who come up with new encryption protocols can surely do a lot better than my naive example above which would make it almost impossible for someone to figure out.

[–] Valmond@lemmy.world 3 points 3 days ago

Without security updates it would quickly be a nightmare to use windows.

Anyone remembers installing xp from a CD? It didn't have security updates, and accepted all kind of trash right in from the internet right away by default lol.