I am amused that MS has its own Linux flavor, but I won't make a joke about it. I won't mention previous attempts at embrace, extend and extinguish. I want to focus on the IoT part. Do not get me wrong. I am glad MS tries to show they care about security in IoT space. Heavens know I don't want to see Starbucks microwave botnet in 2021.
Microsoft offers $100k to hack its custom Linux OS
41–50 of 66 posts
Re: Microsoft offers $100k to hack its custom Linux OS
#42I am amused that MS has its own Linux flavor, but I won't make a joke about it. I won't mention previous attempts at embrace, extend and extinguish. I want to focus on the IoT part. Do not get me wrong. I am glad MS tries to show they care about security in IoT space. Heavens know I don't want to see Starbucks microwave botnet in 2021.
So I guess you don't believe in truly open source and free software. Where everyone, regardless of motive or position, has equal access to it.
Re: Microsoft offers $100k to hack its custom Linux OS
#43I am amused that MS has its own Linux flavor, but I won't make a joke about it. I won't mention previous attempts at embrace, extend and extinguish. I want to focus on the IoT part. Do not get me wrong. I am glad MS tries to show they care about security in IoT space. Heavens know I don't want to see Starbucks microwave botnet in 2021.
So I guess you don't believe in truly open source and free software. Where everyone, regardless of motive or position, has equal access to it.
They have access. I am not arguing against it. I have memory of what they have done. Should I just forget it?
Re: Microsoft offers $100k to hack its custom Linux OS
#44Win win. Flag not captured: MSFT is secure! Flag captured: Linux is insecure.
Linux's security isn't in question anymore, certainly not among developers who would be choosing whether to use Azure Sphere. Linux has been battle-tested for decades, and Linux already won. This is Microsoft embracing it, for better or for worse. And frankly I'd rather have a Microsoft Linux distro on my fridge than a slimmed down version of Windows.
I'd rather just have a plain old fridge, honestly, but we're talking about IoT OSes right now.
Re: Microsoft offers $100k to hack its custom Linux OS
#45Earlier quoted context omitted.
How about we stop using HN's comment section to tell irrelevant-to-the-story personal anecdotes? This is basically the top/most upvoted comment of every article. Surely I can't be the only one to notice this trend?
I don’t see why it’s a problem. If it’s the most up-voted, then clearly people find it interesting.
I think we could do a lot worse than anecdotes, but what I find weird is how the anecdotes on HN are always so smug, like this one. "Heh, my old co-worker thought my 'little hacker buddies' couldn't hack his website ;b Let's just say they put quite a dent in it heh ;b."
Bit of an eye roll.
Re: Microsoft offers $100k to hack its custom Linux OS
#46Win win. Flag not captured: MSFT is secure! Flag captured: Linux is insecure.
That's really cynical. It could also just be that bounties like this are a useful way to improve security of software. Linux's security isn't in question anymore, certainly not among developers who would be choosing whether to use Azure Sphere. Linux has been battle-tested for decades, and Linux already won. This is Microsoft embracing it, for better or for worse. And frankly I'd rather have a Microsoft Linux distro…
Of course. This is Microsoft. The memory of the culture of Gates and Ballmer is not erased.
>And frankly I'd rather have a Microsoft Linux distro on my fridge than a slimmed down version of Windows
Referencing security of fridges reminded me of this https://www.youtube.com/watch?v=BnKpNVHw-TQ :)
Re: Microsoft offers $100k to hack its custom Linux OS
#47Re: Microsoft offers $100k to hack its custom Linux OS
#48What is the strategy here, to make a Chromium like play where the project is open but for practical purposes everyone just uses Chrome? That might not be terrible for the ecosystem
Re: Microsoft offers $100k to hack its custom Linux OS
#49Earlier quoted context omitted.
I don’t see why it’s a problem. If it’s the most up-voted, then clearly people find it interesting.
It's a problem exactly because it's up-voted, it's derailing. Happens on so many articles recently. Either derailing by a personal anecdote, or by the "middlebrow dismissal": https://news.ycombinator.com/item?id=4693920 Both are equally derailing. In this case, I would much rather the comments be about the actual OS in question or the trend of big companies crowdsourcing security (penetration testing).
These anecdotes provide societal context to the story. Why would Microsoft get the public to harden their product? Surely they have enough resources to do it themselves right?
Because many eyes make light work. Some people would obsess over trying to hack this OS, putting in far more effort than someone paid 9-5 to do it.
Re: Microsoft offers $100k to hack its custom Linux OS
#50Clearly they've put a lot of work into this and are willing to pay out for a "3rd party audit" so to speak. But my schadenfreude is hoping for an outcome similar to what happened to an old co-worker of mine back in 2005. He was a Windows nut and we were always in a friendly competition about which ecosystem was the better one. One time he had done a bunch of modifications to his own laptop OS, IDS, and tweaking servi…
If his judgment is that bad on a basic level, how bad must it be on a technical level?