Microsoft repo secretly installed on all Raspberry Pi’s Linu

If it doesn't relate to Debian, but you still want to share it, please do it here

Microsoft repo secretly installed on all Raspberry Pi’s Linu

Postby Moltke » 2021-02-04 14:29

Hi everyone! Hope you're ll having a nice life! :)
In a recent update, the Raspberry Pi OS installed a Microsoft apt repository on all machines running Raspberry Pi OS without the person’s or admin’s knowledge. Every time a Raspbian device is updated by having this repo, it will ping a Microsoft server.

I don't own a Raspberry, but still...
https://www.cyberciti.biz/linux-news/he ... -linux-os/
Moltke
 
Posts: 39
Joined: 2017-03-16 18:10

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby Head_on_a_Stick » 2021-02-04 15:34

Disgraceful but hardly surprising given how blob-ridden the hardware is in the first place.
Black Lives Matter

Debian buster-backports ISO image: for new hardware support
User avatar
Head_on_a_Stick
 
Posts: 13450
Joined: 2014-06-01 17:46
Location: /dev/chair

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby Deb-fan » 2021-02-04 17:26

Fire's hot, water's wet and MS is pretty craptastic. What else is new but its the same all over too. Stopped using MS many years ago for several reasons, moral/ethical and technical. Main one being they can't touch what gnu/linux and open source offers people.

Would devote more time being disgusted by what MS and many others do but it takes too much energy. I've come to consider all manner of things such as this an integral part of technology, take the good with the bad or turn off all our gadgets and digital goodies. :P
Most powerful FREE tech-support tool on the planet * HERE. *
Deb-fan
 
Posts: 1035
Joined: 2012-08-14 12:27

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby golinux » 2021-02-04 17:30

I guess we are are now in the "Extinguish" phase.
May the FORK be with you!
User avatar
golinux
 
Posts: 1556
Joined: 2010-12-09 00:56
Location: not a 'buntard!

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby stevepusser » 2021-02-04 18:38

The distro it comes with is Raspian, right?

Hmmm, some of the MX devs are in the process of creating a Fluxbox edition of MX for the Pi. I've been able to set up MX cross-compile armhf build environments in pbuilder and sbuild, but there seems to be an unavoidable ten times slowdown in the emulation, so something that might take a half hour to build for x86 takes 5-6 hours for armhf. Another packager has their own Pi for compiling the smaller packages, too.
MX Linux packager and developer
User avatar
stevepusser
 
Posts: 12290
Joined: 2009-10-06 05:53

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby Deb-fan » 2021-02-04 18:49

So many concerned in the open source community are saying people need to shut their pi-holes? That makes much sense. It was in the article and now I won't be able to get it outta my head. Will be trying to work in comments about people's pi-holes for awhile going forward.

People please watch what you're putting in your pi-holes, also what's coming out of them too. DAM U MS!!!
Most powerful FREE tech-support tool on the planet * HERE. *
Deb-fan
 
Posts: 1035
Joined: 2012-08-14 12:27

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby Moltke » 2021-02-04 20:53

According to some users in the comments, in the article I mean, it isn't "as bad as it seems".

The distro it comes with is Raspian, right?

Raspian? No. It does come with Raspbian. #just a joke., sorry, couldn't help it :lol:
From the article:
It comes with Debian Linux based modified operating system called Raspbian
Moltke
 
Posts: 39
Joined: 2017-03-16 18:10

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby LE_746F6D617A7A69 » 2021-02-04 21:05

golinux wrote:I guess we are are now in the "Extinguish" phase.
Not yet (IMO) - I think it's still the "Embrace" phase, excluding some stolen projects which are now in the "Extend" phase.

The world have changed since year 1995, and today Microshit is no longer a dictator - and they know this.
Linux-based systems are ubiquitous - starting from intelligent fridge, wash machines, cars and ending with supercomputers - Microshit have lost the battle of the world' domination - this is a fact.
What they can still do, is to pollute FreeSoftware/OpenSource world with their shitty software - using various tricks, like VSCode telemetry, they can still make money by selling user's (meta)data.

Today Microcrap is not more dangerous than Facepalm or Google - i.e. We have a problem with few corporations, which became more powerful than governments, and which have the power to take control of or destroy the Democracy, or in longer perspective - our world, as we know it.

What's really (not-so)funny in this context, the corporations are in fact illegal:
https://reclaimdemocracy.org/corporate-accountability-history-corporations-us/
(just an example - there are hundreds of similar sites)
Bill Gates: "(...) In my case, I went to the garbage cans at the Computer Science Center and I fished out listings of their operating system."
The_full_story and Nothing_have_changed
LE_746F6D617A7A69
 
Posts: 472
Joined: 2020-05-03 14:16

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby Danielsan » 2021-02-05 06:03

This is a very bad attitude and from time to time we see IT companies doing stupid stuff like that, updating shouldn't change your setup, and they should alert about that. The issue looks like is related with the unattended-upgrade which should be used to install security updates and not modifications to the system configuration, at this point you can't trust anymore the PI foundation...
User avatar
Danielsan
 
Posts: 635
Joined: 2010-10-10 22:36

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby reinob » 2021-02-05 07:30

I noticed a few days ago while updating my Raspberry Pi 3, which runs raspbian (now "Raspberry OS").
It's the repo for Visual Studio Code.

For me it was a big WTF moment, since I wouldn't have expected that without any sort of question or announcement.
I also have a Raspberry Pi 4, but that one uses pure Debian, and as one would expect, no repo was "injected".

(I also have a Rasperry Pi 1 running NetBSD :)

For raspbian, I plan to remove the raspberry-sys-mods package (or whatever it's called), which is the one responsible. It's postinstall script is a nightmare. Or switch to pure Debian altogether..
reinob
 
Posts: 912
Joined: 2014-06-30 11:42

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby Hallvor » 2021-02-05 20:35

If you use Raspberry Pi OS, you are trusting that we make good decisions about who to trust. In this case, to support our goal of delivering a better experience to our users, we have made the decision to trust Microsoft.


https://www.raspberrypi.org/forums/view ... t&start=25

:roll:
Lenovo ThinkPad T440S, Intel Core i7-4600U CPU @ 2.10GHz, 8 GB RAM, 256 GB SSD, Debian Bullseye (KDE)
Lenovo ThinkPad X240, Intel Core i5-4300U CPU @ 2.90GHz, 8 GB RAM, 120 GB SSD, Debian Buster (KDE)
User avatar
Hallvor
 
Posts: 1120
Joined: 2009-04-16 18:35
Location: Norway

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby Deb-fan » 2021-02-06 00:17

Do think there's a couple clear takeaways from this situation.

A big one being use actual Debian vs based on. Plenty of good Debian based distro's but even those with honorable intentions still aren't going to have a fraction of the knowledge, skill, competence, resources and experience of all those officially associated with the Debian project itself. Some others have clear commercial motivations, are for profit and not even saying that's a bad thing, it's accepted even encouraged by the terms of the GPL and similar. I know that gnu/Linux wouldn't be anywhere near as good as it is without attracting commercial interest. People who founded all of this knew that and never made a secret about it either.

Still think this type of thing does bring the Pi foundation's integrity into question, am assuming this new found trust of MS came along with some payment, again imo not necessarily a bad thing, all of these technology projects do require effort and resources, open source developers can't eat the open source code they create, can't pay the electric bill with it either but the deceptive way these people apparently chose to go about it, including this without user approval or notice, as if trying to sneak something in is a wee craptastic. For me personally long ago made the decision to get my Debian supplied directly from the source, pure Debian.

Now back to screwing with the whacknuts, errrr, yep the situation is dire fella's, think it's all over now. Everytime someone with an affected Raspbian OS refreshes pkgs MS will almost instantly be aware of it via these treasonous pings. Armed with this incredible insight we'll probably all be enslaved pretty soon, may as well get used to calling Bill Gates master, dammit !!!

Would you like some coffee master Gates, a pillow perhaps master Gates, should I walk your dogs again master Gates, a nice foot rub master Gates ... DAM U MS !!! :P
Most powerful FREE tech-support tool on the planet * HERE. *
Deb-fan
 
Posts: 1035
Joined: 2012-08-14 12:27

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby craigevil » 2021-02-08 06:46

On my new PI400 the MS repo was added but was commented out.
No biggie. It has VScode which I guess is a complex coding app. Me I haven't a clue how to code.
Yes they should have made an announcement. Personally I think people are freaking out for no real reason.

Contents of sources.listd:
docker.list
raspi.list
vscode.list

It does say it was automatically added though. Which I guess is what is stressing people out.
Code: Select all
THIS FILE IS AUTOMATICALLY CONFIGURED ###
# You may comment out this entry, but any other modifications may be lost.
#deb [arch=amd64,arm64,armhf] http://packages.microsoft.com/repos/code/ stable main


BTW nice to be back. :D
Raspberry PI 400 Distro: Raspberry Pi OS (Unstable) Kernel: 5.10.31-v8+ aarch64 DE: LXDE Ram 4GB
Debian - "If you can't apt-get something, it isn't useful or doesn't exist"
User avatar
craigevil
 
Posts: 5212
Joined: 2006-09-17 03:17
Location: Oz

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby reinob » 2021-02-08 09:03

@craigevil,

Are you sure the repo was #commented out?
Yesterday I updated a raspberry pi 400 and I got this:

Code: Select all
# cat vscode.list
### THIS FILE IS AUTOMATICALLY CONFIGURED ###
# You may comment out this entry, but any other modifications may be lost.
deb [arch=amd64,arm64,armhf] http://packages.microsoft.com/repos/code stable main


Other than that, regardless of who may or may not freak out about this (vscode is a text editor which runs in an embedded browser..), I find it highly impolite from Raspberry that they add this repo without any prior information.
reinob
 
Posts: 912
Joined: 2014-06-30 11:42

Re: Microsoft repo secretly installed on all Raspberry Pi’s

Postby Deb-fan » 2021-02-08 18:46

WARNING, more dorkish ramblings follow, not into dorkish ramblings ? Scroll now. :D

Have come across or expounded about many MS conspiracy theories, many what I consider to be proven, if there's enough supporting facts to establish xyz-party engaged in whatever unethical, immoral or even outright illegal activity then it becomes less of a theory and more of a yeah whoever did something crappy for financial gain and self interest. Same time in this context that's called business, how it works, as it has forever. Corporations do buy out or otherwise snuff out competitors, they do bribe and pass out large sums of money to people in political positions in return for favorable treatment.

Microsoft has done it's share, been sued and sanctioned many times over the years and are still a megatech Corporation. One of my real pet peeve issues with them is something I call murder by proxy and it involves some pretty twisted thinking, looking at things in a way not many would, even those involved, they may reasonably enough just be considering something they're doing as strictly business. A small percentage within the particular enterprise that even knows, we're doing something crappy, yes we know it's not quite legal but it works, we beat the other people, are going to make more money and be in a better position to keep doing so = SUCCESS.

What someone may ask is murder by proxy ? Last time I checked(a long time ago)MS was reporting like 90billion in annual earnings and around 10% of that came from US government contracts for software + support alone. That pisses me off, why in the fark should my country's government pay 9bil to this corporation when better software is available for free ? Keep seeing it reported that 1/3 or so of the people (edit: make that 1 in 10 or so, still A LOT) in this country have food insecurity, don't know where the next meal is coming from and 9billion is a lot of money to hand over to MS vs putting those resources into public health services, social support, education etc and the US and everybody like myself are some of the luckiest on the planet when it comes to this type of thing.

Thank my lucky stars I was born here, where people are free to take for granted many things others elsewhere couldn't dream of doing. Many places many people may have a hard time finding drinking water that's safe. But if in giving MS that huge amount of money, people are actually dying as a result somewhere in the country, then in my twisted view it's indirectly murdering them (by proxy)because the resources to prevent that death are available, only decision is wrongly made to devote it elsewhere. Yes you can be sure MS spends a nice chunk of money in Washington DC in the form of special interests, lobbying and passing out campaign contributions to influencial people in politics.

That's business, so folks may wish to look into this type of thing, if you're one of those fortunate to even be living in one of the 1st world nations, could want to ask how much cash your governmental bodies are spending or giving to MS for software, when there's an ocean of open source which is not only free of licensing costs but also better software just sitting waiting to be used instead.

On a positive note, all the people who have made all this awesome technology a reality only need to keep doing what they do, keep maintaining or developing awesome software and in time more people are bound to start using it, more people becoming aware of what's going on.

Also Bill Gates is apparently the founder of one of the biggest charity foundations on Earth, said to have 45bil in assets and doing much that's of benefit to humanity. Only saying as usual, majority of the time it's never simple, simple views are for simple minded people. So it'd be ridiculous to say MS is composed of pure concentrated evil, or that Bill Gate's and all the people who work for MS are robots from the quaqmire dimension plotting to enslave us all, that's insane nonsense. Would make for a possbily entertaining movie though. :) I made my choice, I don't need Windows(any version) in my daily computing life and why would I bother with Debian available ?

If I ever do get into the Pi revolution, it'll have pure Debian running on it. I don't need some distro maintainer deciding which windows manager, taskbar or file-manager I should be using on my pi. You want a piece of the Pi ? Go get your own, this one's mine kind of thing. :)
Last edited by Deb-fan on 2021-03-01 18:14, edited 2 times in total.
Most powerful FREE tech-support tool on the planet * HERE. *
Deb-fan
 
Posts: 1035
Joined: 2012-08-14 12:27

Next

Return to Offtopic

Who is online

Users browsing this forum: No registered users and 12 guests

fashionable