👍Maximum Derek👍Microsoft called out for “blatantly negligent” cybersecurity practices
sebinspaceNot surprising, MS probably have one of the largest attack surfaces of any entity
Yeah, but the NFL kept calling them attack ipads.
It the job of responsible company (especially one Microsoft’s size) to know that and plan for it accordingly.
Risk management is hard baked into the infosec responsibility set, size isn’t an excuse
Did you say, “Size doesn’t matter”?
(FYI - in hear this excuse all the time at a large company. Somehow our complexity and scale is always an excuse people reach toward. And, as you say, our job from infosec is to shut that whining down.
I don’t know what the US government runs on its most secure systems but with all the money we pay in taxes, I hope it’s not Windows, Linux, or macOS. I hope they scooped up some 80’s operating system no one would ever suspect and kept it going in parallel. Good luck hacking into a system with a fully custom version of Business Operating System that runs on 64 bit Motorola processors no one knows about but the CIA’s sysadmins.
I know in reality they probably run Windows Vista on 12 year-old laptops or some shit and get hacked all the fucking time but I’d like to think someone had enough sense to not do that.
average650The OS they choose is really not the most important part of its most secure systems.
Ok, fine. Then I hope they use paper and guns to protect secrets.
KairuByteYou can have the most secure and secret OS in existence, and you’re failing miserably the moment it has unfettered access to the internet.
And OS can be secure if it’s airgapped in a sealed room.
There’s a happy medium in there, and that’s where most governments want to be.
Nah, its a bunch of panasonic toughbook 30s. Except the Airforce, we get M1 Macbooks
Guy is talking about cloud. Azure is not the first cloud provider, it’s simply tha laziest
Not even remotely. Pay some attention. There is basically no security in any cloud service and if you put your data on someone else’s server just assume it’s going to immediately be sucked up by threat actors.