1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
|
---
title: "On Malware"
date: 2021-03-12T00:00:00
draft: false
---
# A Hypothetical Program
Imagine a program that:
1. Has a "universal back door" that allows the developer to make remote changes to users' systems without their knowledge or permission. [1]
2. Forces upgrades on its users. [2]
3. Steals users' encryption keys. [3]
4. Forcibly removes software from its users' systems [4].
5. Pesters its users when they don't install the "preferred browser". [5]
6. Displays annoying ads on users' systems. [6].
7. Spies on users while they use it, with surveillance anti-features that cannot be disabled. [7]
8. Forces users to be online just to write a text document. [8]
9. Blocks users from downloading any apps other than the ones the developers approve of. [9]
10. Purposely deletes ebooks that users have already bought. [10]
Would you count this program as malware? What if I told you that somewhere between 70%-90% of desktop and laptop computers have this program installed?
# What is Malware?
I am of course talking about the Windows 10 operating system. Windows 10 did all of these things at one point or another and still does many of them. Let's not forget that operating systems are "just" programs too. They manage system resources and act as a middleman between the hardware and the user, but they are "just" programs like anything else. And any kind of program can potentially be malware.
If I asked a classroom full of computer science students if Windows 10 is malware, I'd have a hard time finding someone besides GNU/Linux nerds to say yes. However, if I asked the same question listing the 10 items as I did just now with no mention of Windows 10, I'd be hard-pressed finding someone to say no. Why is that?
There exists a strong bias especially among the tech industry and academia not to see useful software as malware. Windows 10 isn't entirely malicious like ransomware or a virus. Windows 10 is very useful and its "primary" function as an operating system is not malicious although it has far more known anti-features than I'm comfortable with and probably a host of others no one even knows about. With all that said, the vast majority of Microsoft employees that code Windows 10 are not intentionally adding anti-features and the employees that are adding them probably wouldn't consider the anti-features they add "malicious". None of this detracts from the fact that these anti-features are in fact malicious and are basically harming the world.
# Expanding the Definition of Malware
Now my goal in this post is not to say that you have to call Windows 10, or any other program with anti-features, malware. The point is that right now most computer users have a very narrow idea of what counts as malware and I hope to expand that. With a computer virus, worm or trojan, infecting the target machine is almost always the main goal of the program. In cases where it's not, there's usually a supply chain attack where the virus is embedded inside a useful program that was written by another developer to trick users into downloading it.
Malware is a more generic term, so it need not be the case that its main purpose is to harm users. Malware is simply malicious software, software that contains anti-features. Telemetry isn't always malicious if done right especially if it can be disabled. However, remotely deleting users ebooks, whether or not they "agreed" to the terms of service which nobody has the time to read let alone understand, forcing users to be online just to create documents, having a universal backdoor and intrusive telemetry that is impossible to turn off, that's malware. There's no excuse for anti-features like that to be out of the user's control.
# Malware in Free Software
The main difference with malware in free and proprietary software is when a free program has anti-features, they can't be hidden from the users. The anti-features are out in the open. With proprietary software like Windows 10 there's no way to determine how many anti-features it contains. It could easily contain far more than we already know about.
It is true that free software generally has far fewer anti-features due to its very nature of the source code being public. However free (as in freedom) software isn't immune to malware. The Spyware Watchdog Article Catalog lists free software programs that it considers spyware. Spyware is a subcategory of malware focused on user spying. The catalog is doing with spyware much the same thing I'm doing with the word malware; it is applying a broader definition of spyware to programs to see what happens. The results are quite interesting. See the link below for their spyware list.
[Spyware Watchdog][11]
Finally, one reason free software has less malware is reputation. Reputation is important to many programmers and adding anti-features to programs might mean no one will trust your work any more, so there's a strong incentive to not do that. This is true even if you're only pseudonymous like some i2p developers are. Your anonymous identity still has a reputation and it's best to preserve it.
# Closing
I want to encourage readers to consider expanding their idea of what counts as malware and to start using the term "malware" more often to describe common programs with anti-features. Malware programs like Windows 10 are too normalized. We must demand better and freer software and one way to do that is by changing the words we use when talking about software.
You'll also notice I use the word "anti-feature" instead of "feature". This is another way we can change our language to expose the truth about what these programs actually do. Calling anti-features malicious features instead may be better for non-technical audiences. What matters is getting the point across to others that these features don't deserve to be called features unqualified because they are malicious and they hurt the user.
Link(s):
[1: http://www.informationweek.com/microsoft-updates-windows-without-user-permission-apologizes/d/d-id/1059183](http://www.informationweek.com/microsoft-updates-windows-without-user-permission-apologizes/d/d-id/1059183)
[2: https://support.microsoft.com/en-us/windows/manage-updates-in-windows-10-643e9ea7-3cf6-7da6-a25c-95d4f7f099fe](https://support.microsoft.com/en-us/windows/manage-updates-in-windows-10-643e9ea7-3cf6-7da6-a25c-95d4f7f099fe)
[3: https://theintercept.com/2015/12/28/recently-bought-a-windows-computer-microsoft-probably-has-your-encryption-key/](https://theintercept.com/2015/12/28/recently-bought-a-windows-computer-microsoft-probably-has-your-encryption-key/)
[4: https://uk.pcmag.com/operating-systems/131798/microsoft-starts-automatically-removing-flash-from-windows](https://uk.pcmag.com/operating-systems/131798/microsoft-starts-automatically-removing-flash-from-windows)
[5: https://www.ghacks.net/2018/09/12/microsoft-intercepting-firefox-chrome-installation-on-windows-10/](https://www.ghacks.net/2018/09/12/microsoft-intercepting-firefox-chrome-installation-on-windows-10/)
[6: http://www.theverge.com/2017/3/17/14956540/microsoft-windows-10-ads-taskbar-file-explorer](http://www.theverge.com/2017/3/17/14956540/microsoft-windows-10-ads-taskbar-file-explorer)
[7: https://arstechnica.com/gadgets/2017/10/dutch-privacy-regulator-says-that-windows-10-breaks-the-law](https://arstechnica.com/gadgets/2017/10/dutch-privacy-regulator-says-that-windows-10-breaks-the-law)
[8: https://products.office.com/en-us/microsoft-office-for-home-and-school-faq?legRedir=true&CorrelationId=c9c5b549-11ad-4f71-bf81-b7e069fdb372](https://products.office.com/en-us/microsoft-office-for-home-and-school-faq?legRedir=true&CorrelationId=c9c5b549-11ad-4f71-bf81-b7e069fdb372)
[9: https://www.theguardian.com/technology/2017/may/03/windows-10-s-microsoft-faster-pc-comparison](https://www.theguardian.com/technology/2017/may/03/windows-10-s-microsoft-faster-pc-comparison)
[12: https://www.bbc.com/news/technology-47810367](https://www.bbc.com/news/technology-47810367)
[11: https://spyware.neocities.org/articles/index.html](https://spyware.neocities.org/articles/index.html)
|
