Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

washingtonpost.com

Post reply on HN
Print view View original

31–40 of 456 posts

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#31

Post by anonfordays »

SketchySeaBeast wrote: post #8
jmclnx wrote: post #7

Another day another vulnerability with Microsoft. I wonder if this will incentivize the countries to move faster with Linux. Probably not since there are so many of these breaches people just ignore them. I miss the old days when a breach involved someone breaking into the computer room and grabbing as many mag tapes as they can carry and run :)

Genuinely asking - is there a Linux alternative to Sharepoint? I couldn't care less if it was lit on metaphorical fire and dumped into the sea, but a lot of orgs using it extensively.

It's not just SharePoint, it's the entire Microsoft suite of "productivity" products that the government uses. Is there a Linux alternative to that?

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#32

Post by SketchySeaBeast »

kuhsaft wrote: post #28
SketchySeaBeast wrote: post #8

Earlier quoted context omitted.

Genuinely asking - is there a Linux alternative to Sharepoint? I couldn't care less if it was lit on metaphorical fire and dumped into the sea, but a lot of orgs using it extensively.

For collaborative documentation, there’s probably a bunch of alternatives. But SharePoint is the linchpin for Microsoft 365. Well technically SharePoint and Exchange. You can’t use any Microsoft 365 products without SharePoint. OneDrive uses SharePoint. Outlook Groups and Teams Channels create Microsoft 365 Groups. Every Microsoft 365 Group creates a SharePoint site. Microsoft Loop uses Microsoft SharePoint Embedded.…

Yeah, that's what I'm thinking. Is it great? Well, no, but it's incredibly integrated and that has a great appeal to orgs.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#33

Post by whynotmaybe »

SketchySeaBeast wrote: post #8
jmclnx wrote: post #7

Another day another vulnerability with Microsoft. I wonder if this will incentivize the countries to move faster with Linux. Probably not since there are so many of these breaches people just ignore them. I miss the old days when a breach involved someone breaking into the computer room and grabbing as many mag tapes as they can carry and run :)

Genuinely asking - is there a Linux alternative to Sharepoint? I couldn't care less if it was lit on metaphorical fire and dumped into the sea, but a lot of orgs using it extensively.

nextcloud ?

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#34

Post by justsomehnguy »

SketchySeaBeast wrote: post #8
jmclnx wrote: post #7

Another day another vulnerability with Microsoft. I wonder if this will incentivize the countries to move faster with Linux. Probably not since there are so many of these breaches people just ignore them. I miss the old days when a breach involved someone breaking into the computer room and grabbing as many mag tapes as they can carry and run :)

Genuinely asking - is there a Linux alternative to Sharepoint? I couldn't care less if it was lit on metaphorical fire and dumped into the sea, but a lot of orgs using it extensively.

NextCloud is actively tries to be AIO replacement for SharePoint.

Of course it's quite a poor replacement but it does exists.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#35

Post by tialaramex »

timewizard wrote: post #22

Why didn't they just rewrite it in Rust?

IIRC Microsoft is rewriting some of these backend services in Rust, although not because it will increase security but because it lets them get better perf than existing solutions without the safety tradeoff they'd have suffered to go to C++ which would have been their option 15-20 years ago. I don't know whether Sharepoint was on that list.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#36

Post by mynameisash »

tialaramex wrote: post #35
timewizard wrote: post #22

Why didn't they just rewrite it in Rust?

IIRC Microsoft is rewriting some of these backend services in Rust, although not because it will increase security but because it lets them get better perf than existing solutions without the safety tradeoff they'd have suffered to go to C++ which would have been their option 15-20 years ago. I don't know whether Sharepoint was on that list.

You also can get better velocity than with other languages due to the compile-time checks.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#38

Post by zenmac »

aspenmayer wrote: post #5
slantedview wrote: post #4

Is it a coincidence that this was reported on the same day it was also reported that the FBI was storing the Epstein files on a Sharepoint server [1]? https://www.muellershewrote.com/p/the-epstein-cover-up-at-th...

I was not sure if this was mere speculation on your part, but I think you might be onto something here. https://www.muellershewrote.com/p/the-epstein-cover-up-at-th... | https://archive.is/RZqU0 > The process of reviewing the Epstein and Maxwell files was chaotic, and the orders were constantly changing - sometimes daily. One person I spoke to on the condition of anonymity said that many agents spent more time waitin…

[dead]

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#39

Post by Jtsummers »

CommenterPerson wrote: post #37

Wondering if this was a self goal to, you know, get people to use this enshittified product on the cloud?

There are basically two things at play here:

MS's hosted version of SharePoint. It's apparently unimpacted by this current round of attacks. DOD (since it's been brought up by other commenters) makes significant use of this.

People hosting SharePoint instances themselves. Some on-prem, some with rented computers. These are the impacted ones. It's not about "the cloud", it's about hosted SharePoint having weaknesses that were exploited and many organizations apparently leaving their SharePoint instances accessible over the open internet. These hosted instances are also probably old and unpatched which doesn't help things. Some (many?) units within DOD make use of this, but definitely not all.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#40

Post by polarbear67 »

shrubble wrote: post #19

Wasn’t Microsoft just recently using Chinese people living in China to administer DOD servers? I would guess they use Sharepoint inside the DOD?

Link: https://www.reuters.com/world/us/microsoft-stop-using-engine...
Post reply on HN