News: 1713770948

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Rarest, strangest, form of Windows saved techie from moment of security madness

(2024/04/22)


Who, Me? It's Monday once again, dear reader, and you know what that means: another dive into the Who, Me? confessional, to share stories of IT gone wrong that Reg readers managed to pretend had gone right.

This week, meet a reader we'll Regomize as "Declan" who describes himself as "a designer working with CAD to design machines" – but one with enough technical nous that he essentially taught himself how to use the software. Indeed, at his first job in the '90s he was considered the "technical guy" and the go-to for support.

The consultancy he was working for had a bunch of Windows machines, a few Unix boxes – mostly from Sun and Silicon Graphics – plus one Digital Alpha RISC machine, running the special cut of Windows NT Microsoft made for those boxes. For those who don't remember that short-lived project, it was basically Microsoft's half-hearted gesture to the idea that there were non-Intel processors in the world. Most of the work on porting NT to Alpha was done by Digital, and when that firm was bought by Compaq the dream was over.

[1]

Anyway, long story short, Windows NT ran on Alpha, but not hugely well, and there were virtually no native applications for it – almost everything ran in emulation. However at the time the 500MHz Alpha was sufficiently speedy that performance was adequate. That was the machine Declan used.

[2]

[3]

Declan's varied duties (on top of his CAD work) had him installing Windows, supporting the network, and above all trying to stop his co-workers spreading viruses.

[4]Tired techie 'fixed' a server, blamed Microsoft, and got away with it

[5]Windows 95 support chap skipped a step and sent user into Micro-hell

[6]You break it, you ... run away and hope somebody else fixes it

[7]DBA made ten years of data disappear with one misplaced parameter

Declan understood that a virus hitting his employer's network would probably bring work to a halt, because the antivirus software of the time was mostly updated only after infections were widespread. He was therefore most diligent in instructing everyone to be cautious about opening attachments or unfamiliar files from untrusted sources.

Then as now, prevention was superior to cure.

Also then as now, people make mistakes.

[8]

One tired, stressed afternoon, Declan received an email which contained an Excel spreadsheet. Thinking it looked legit enough, he double-clicked to open it.

Immediately his screen was obscured by error messages. He panicked, realizing that the spreadsheet must have contained a macro virus. Then he realized that he was about to take the company down by doing exactly what he warned everyone else not to do. Oh, the shame! The humiliation!

After a moment, though, a calm descended upon him as he read the error messages.

[9]

The spreadsheet was indeed infected. However, the worm it contained was designed to open the recipient's contact list in Outlook and send itself to everyone, thus perpetuating its spread – for no reason other than to spread further.

Wasn’t the world nice before ransomware?

What this worm had not counted on was that Declan was running both Excel and Outlook in emulation, and the integration between them in that environment was so poor that it couldn't work. The worm kept trying to create emails and send them, but failed every single time.

Declan managed to stop the flood of error messages on his own machine, and realized he would never ever have to tell anyone about his tragic lapse in vigilance.

If you've got something you've always wanted to get off your chest, tell us all about it in [10]an email to Who, Me? and we'll cleanse your soul – anonymously, of course. ®

Get our [11]Tech Resources



[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2ZiY1P6JmZXS48Gx63GUfOgAAAAg&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZiY1P6JmZXS48Gx63GUfOgAAAAg&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZiY1P6JmZXS48Gx63GUfOgAAAAg&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[4] https://www.theregister.com/2024/04/15/who_me/

[5] https://www.theregister.com/2024/04/08/who_me/

[6] https://www.theregister.com/2024/04/01/who_me/

[7] https://www.theregister.com/2024/03/25/who_me/

[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44ZiY1P6JmZXS48Gx63GUfOgAAAAg&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_security/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33ZiY1P6JmZXS48Gx63GUfOgAAAAg&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[10] mailto:whome@theregister.com

[11] https://whitepapers.theregister.com/



UCAP

Reading that gave me flashbacks to a much earlier era in my career. There but the grace of goes I!

MyffyW

The contrarian in me would probably say that the rarest form of Windows was probably Windows NT on MIPS, a thing that I have yet to see but I believe was a possibility.

And of course these was NT on PowerPC, although that I have seen if not used in either jest or anger.

KittenHuffer

And there I was thinking that the rarest form of Windows ..... was one that worked reliably!

John Riddoch

We had a couple of the [1]SGI MIPS Windows workstations when I was doing IT support for a Uni department. I didn't do much on them, but I recall they weren't particularly reliable, even worse than regular Windows NT; given their peculiarities and rarity, they probably didn't get much attention from MS for patches & support. I don't believe they got much usage either, they'd been bought to do some kind of 3D stuff for someone's PhD IIRC, but didn't work that well for the job.

[1] https://en.wikipedia.org/wiki/SGI_Visual_Workstation

Security through incompetence

Pascal Monett

Declan's lucky day was because Borkzilla couldn't be arsed to do a proper CPU version, and couldn't be arsed to make emulation work properly either.

So, a sigh of relief, a restart of the VMs (or similar) and the problem is over.

One of the rare cases where Redmond incompetence saved the day.

Re: Security through incompetence

Korev

I guess Declan could be considered an Alpha male...

What A Waste Of A DEC Alpha ...

ldo

... to run Windows NT on it.

By about the mid 1990s, there were four main OSes available for the Alpha: DEC’s own OpenVMS and “OSF/1” (later to be renamed “Tru64”) Unix, Mirosoft’s Windows NT, and this newfangled “Linux” thing.

Remember, the Alpha was a full 64-bit architecture, back when that was still a novelty. Both Unix and Linux were full 64-bit. VMS on Alpha was a hybrid 32/64-bit OS. While Windows NT ran strictly in 32-bit “TASO” mode (“Truncated Address Space Option”), pretending that the top 32 bits of each address simply didn’t exist.

See what I mean about a waste?

Re: What A Waste Of A DEC Alpha ...

A Non e-mouse

We had an early Alpha at Uni. It was screamingly fast compared to the Vaxen and Suns that were the mainstay of University IT. Such a shame HP killed Alpha to save Itanic.

Re: What A Waste Of A DEC Alpha ...

Korev

My first Unix was OSF1 on DEC Alphas at university, first out of curiosity and then because you could always get on them (unlike the Windows 3.11 / NT4 machines).

Re: What A Waste Of A DEC Alpha ...

John Sager

I had one of the small Alphas to play with for a while. I put Linux on it and it was a lovely machine - much better than the pizza-box Sparcstation which was my main machine. Because of its power I was able to run some FORTRAN antenna modelling software on it that produced answers in a reasonable time.

It's sad that its life was cut so short by DEC's troubles. I really thought that it was a major step forward in computer architectures at the time. I still have a copy of "Alpha Implementation & Architecture" though it's now a sad reminder of what might have been.

Korev

Dec lan is a fantastic bit of Regonimisation for a story involving an Alpha

See icon as it's almost time

Tortoise & the hare

trevorde

IIRC, the CAD program was SolidWorks & had an integrated FEA package, CosmosWorks. Analysis on DEC Alpha was, according to users, an order of magnitude faster but DEC stood still & watched while Intel crept past them.

Almost alternate reality...

Bebu

I had forgotten this byway of IT history

Back in the late 90s we had quite a bit of DEC Alpha hardware (being 64 bit) running DEC OSF/1 (ultimately became Tru64) - mostly low end servers but a few Alphastations (200,400,500) - one model of which would habitually boot into ARC or Alphabios (definitely not SRM) so did not boot into the installed DEC Unix.

When I had one of these on my desk to upgrade to 4.0G my curiosity got the better of my judgement and I tried to install the Alpha version of Windows 2000 - I have no idea why we had a copy of the install media* but there were crates of media for the menagerie of Sun, SGI, IBM, HP servers and workstations etc...

In any case the install went as smoothly as on a PC. At the time it seemed to me from the informational messages that the Alphabios was also emulating an x86. Once installed I had a fiddle for a few days and appeared quite fast compared to the standard windows desktops the polloi were using.

Quick install and configuration of DEC Unix and returned to the owner.

Back to reality but probably not to normality. :)

* The standard NT4 install media had non x86 architectures (eg MIPS risc) but I don't recall whether the Alpha was one.

Killfalcon

I have once been saved from an infinite loop sending emails because Azure Information Protection (a plugin that lets you mark office docs "Confidential", "Top Secret" or whatever) didn't let Excel VBA set the status on Outlook mailitems, so there was an error to click-through before the code could progress.

It should have! It worked with all other Office format documents I tried, but not emails. And while it did save me some bother with that email loop, I did still have to work out a fix. The fix was to create a new excel workbook, mark *that* Confidential, attach it to the draft email, wait a split second for AIP to automatically grade the email Confidential (because it inherited the sensitivity from the highest of it's attachment's), then remove the template, boom, email is marked Confidential and will send without further complaint.

About four years later (that'd be now), Microsoft finally integrated the feature properly. I only last week got done stripping out that dodgy workaround!

Reminds me of the old "I love you" virus

Michael H.F. Wilkinson

I was working at the Centre for High Performance Computing of our university at the time, on an RS6000 running AIX, from which I could access the Cray J932, when several infected emails were received. On this and other UNIX boxes the payload was totally harmless. Windows users were less lucky. We all received an apology from the system administrators that, alas, automation of tasks was not as "advanced" on UNIX machines as on Windows, so to experience the true joy of the "I love you" virus, please randomly delete some important files on your system, and send the mail to a random selection of people in your inbox (manually, of course). They ended with a repeat of the apology for the inconvenience.

It's nice to have sysadmins who are competent and come fully equipped with a sense of humour.

Re: Reminds me of the old "I love you" virus

Christoph

And there was the story of the tech support who didn't open it because NOBODY tells tech support "I love you".

"The reason for the success of this somewhat communist-sounding strategy, while the failure of communism itself is visible around the world, is that the economics of information are fundamentaly different from those of other products."

-- Bruce Perens, on Open Source software. (Open Sources, 1999 O'Reilly and Associates)