this post was submitted on 10 Apr 2024
29 points (96.8% liked)

Security

522 readers
1 users here now

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

  1. All instance-wide rules apply.
  2. Keep it totally legal.
  3. Remember the human, be civil.
  4. Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

founded 2 years ago
MODERATORS
top 9 comments
sorted by: hot top controversial new old
[–] echo64 5 points 8 months ago (1 children)

Maybe if they do more layoffs, that'll solve the problem. Surely, the mass layoffs of the past two years have only been a boon to security

[–] [email protected] 0 points 8 months ago

Obviously they're firing the people who created the problem to rebuild from the ground up! 🧠 Trim the fat and such, you know. Then investors can see that they're improving while saving money!

Anti Commercial AI thingyCC BY-NC-SA 4.0

[–] [email protected] 5 points 8 months ago (1 children)

There really is not company that is safe from hacking especially since companies are made up of humans who no matter how hard they try, will make fatal mistakes in their security. Not defending MS as I am not a fan, but just being real.

[–] [email protected] 7 points 8 months ago (1 children)

Of course, but there's a difference between negligence and misfortune.

A federal cybersecurity watchdog group has reported that Microsoft’s cloud cybersecurity has massive and wide-ranging shortcomings ranging from failed technology to a “security culture” that is “inadequate and requires an overhaul.”

Throughout this review, the Board identified a series of Microsoft operational and strategic decisions that collectively point to a corporate culture that deprioritized both enterprise security investments and rigorous risk management.

Anti Commercial AI thingyCC BY-NC-SA 4.0

[–] [email protected] 2 points 8 months ago (1 children)

Agreed, but that is also my point. Carelessness and negligences of lurks in every company…especially large ones where things can fall through the cracks.

[–] [email protected] 1 points 8 months ago

That's true. In this case it's systemic, which is definitely worse. Given Microsoft's size, I still doubt this will have an effect. Governments will unwaveringly continue to use their products 🤷

Anti Commercial AI thingyCC BY-NC-SA 4.0

[–] [email protected] 4 points 8 months ago (1 children)

Pardon my cynicism. The CRSB dropped this report March 20. It is now April 10. I don’t think anything will happen to Microsoft and I don’t think their competitors will see much in the way of new business from this. Microsoft has had shit security in Azure for years. Windows has had glaring security flaws its entire life. People that doubt MS are still using it.

It’s great analysis. Don’t get me wrong. It’s just meaningless.

[–] [email protected] 0 points 8 months ago

I'm with you. Change is hard and many people just don't want change or to change. No idea what it'll take, but my only solace is that giants do fall sometimes. It may take a while, but they do.

Anti Commercial AI thingyCC BY-NC-SA 4.0

Inserted with a keystroke running this script on linux with X11

#!/usr/bin/env nix-shell
#!nix-shell -i bash --packages xautomation xclip

sleep 0.2
(echo '
spoiler Anti Commercial AI thingy [CC BY-NC-SA 4.0](https://creativecommons.org/licenses/by-nc-sa/4.0/) Inserted with a keystroke running this script on linux with X11 ```bash' cat "$0" echo '``` :::') | xclip -selection clipboard xte "keydown Control_L" "key V" "keyup Control_L"

:::

[–] [email protected] 1 points 8 months ago

It’s garbage low cost development that’s caused this, and the reason Google is incapable of competing with M365 in any meaningful way. Interpret that how you will, dear reader.