Technology

37362 readers

238 users here now

Rumors, happenings, and innovations in the technology sphere. If it's technological news or discussion of technology, it probably belongs here.

Subcommunities on Beehaw:

This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago

MODERATORS

[email protected]

183

Microsoft comes under blistering criticism for “grossly irresponsible” security (arstechnica.com)

submitted 11 months ago* (last edited 11 months ago) by [email protected] to c/[email protected]

26 comments fedilink hide all child comments

The aftermath to the recent Microsoft Azure hack by suspected PRC actors.

What is the solution to this? Make sure cloud services are open source so they can be independently vetted? If government and corporate entities chose to use open source solutions, most are presented "as is" with no warranty.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 44 points 11 months ago (3 children)

Recently I was doing some Azure integration work, with OAuth, Teams and Outlook. At one point I noticed that logging in with a MS account causes my browser to do ~10 redirects between different services while downloading over 30 MB of Javascript and thought "Huh, this looks like decades of technical debt. Either MS devs are waaay smarter than me or this is a pile of garbage". I guess both could be true.

[–] [email protected] 25 points 11 months ago (1 children)

They have no choice but to be smarter than us on account of the pile of garbage they've been given.

[–] [email protected] 7 points 11 months ago

Or they simply hope, that the pile of garbage is smarter than the attackers.

[–] [email protected] 18 points 11 months ago

I've done some contracts there and yeah, while they are incredibly smart, there's so much bloated corpo overhead that they are restricted by red tape. I'm not surprised a simple login takes 30 redirects at all.

[–] [email protected] 9 points 11 months ago

All their services are like that! Redirects for days. It’s an absolute gong show believe me. It’s way worse than the public knows.