Live data from Hacker News

Microsoft suspends dev accounts for high-profile open source projects

bleepingcomputer.com

111–120 of 140 posts

Re: Microsoft suspends dev accounts for high-profile open source projects

#111
post #110
post #74

Earlier quoted context omitted.

It is 800 euros for 8 GB device, no thanks, especially in coutries where many dream of getting 1000 euros a month.

Its $600 in the states. $500 if you are a student. What is a cheaper but good enough alternative in your opinion?

I don't live in the states.

Re: Microsoft suspends dev accounts for high-profile open source projects

#112
post #74

Earlier quoted context omitted.

It is 800 euros for 8 GB device, no thanks, especially in coutries where many dream of getting 1000 euros a month.

Dozens of youtube video reviews showing that the 8GB is not really a limitation for what most people need to do with the laptop. Heck I saw a review where the guy played minecraft on it with 20 rather hefty tabs in safari open, without any stuttering. So what is the actual limitation of a neo, and how to they apply to users in that price class?

How much Electron crap did they tested with?

Re: Microsoft suspends dev accounts for high-profile open source projects

#113
post #74

Earlier quoted context omitted.

It is 800 euros for 8 GB device, no thanks, especially in coutries where many dream of getting 1000 euros a month.

Maybe you don't need a laptop then, if your dream is 1000eur.

Ah, too poor to play kind of argument.

Re: Microsoft suspends dev accounts for high-profile open source projects

#114

Microsoft loves sending emails with "Action required" in the subject, when actually no action is required, or it doesn't apply to you, or whatever. Such corporate speak. It's fun searching your email for "Action required" and finding all the things you were supposed to do and it turns out didn't need to do anything about.

I literally have a rule to automatically mark as read any email that has "important update" in the subject, because 99% of these "important updates" are various types of inconsequential "lawyers made us do this" bullshit.

Re: Microsoft suspends dev accounts for high-profile open source projects

#115
post #52
post #40

Earlier quoted context omitted.

> At this point people will move to I think most people just don't care about their computer. Most people just use whatever they are told to use at work.

Most people are just accustomed to pain because they don’t know it could be different

I have never had a successful experience getting someone to try something better, but different. In my experience, people fight for the enshittification they know.

Asking someone to install Signal is already the end of the world, trying it sounds like starting a PhD. I'm not even talking about thinking about using it as a replacement for WhatsApp.

Really, people just don't care. Which I find sad, of course.

Re: Microsoft suspends dev accounts for high-profile open source projects

#116
post #98
post #38

Earlier quoted context omitted.

I think it's just like in software in general: most software is bad, but it doesn't mean that all software is bad and unnecessary. Most security is done badly, but it doesn't mean that security is unnecessary. But I agree: TooBigTech has TooMuchPower.

> But I agree: TooBigTech has TooMuchPower. Passkeys are here to improve your login security! All you have to do is give complete control over your ability to log in to a service to one of three American big tech companies. Yay!

Or you spend 5 minutes reading about them and use a passkey you actually own?

Many times, people choose TooBigTech. People are generally waaaay too lazy to even consider spending some brain cycles on that.

Re: Microsoft suspends dev accounts for high-profile open source projects

#117
I can see some justification for not notifying developers of their actual pending suspension if they have not acted on prior notifications requiring verification steps.

Suppose a developer account, say that associated with VeraCrypt, had been compromised and the compromiser knew or feared they were unable successfully pass verification.

The compromiser could be exploiting their access to modify the product in profitable but fairly benign ways (say making VeraCrypt part of a botnet that didn't do any damage to the host beyond consuming some resources). However, if they got a message saying "Your account will be suspended in 12 hours if you do not pass verification", the compromiser would know that their profit would/could drop or go away. In response, they might push out one last "mandatory auto install" update with a nuclear bomb (perhaps with a delayed trigger) to just do malicious damage to hosts out of spite.

Re: Microsoft suspends dev accounts for high-profile open source projects

#118
post #116
post #98

Earlier quoted context omitted.

> But I agree: TooBigTech has TooMuchPower. Passkeys are here to improve your login security! All you have to do is give complete control over your ability to log in to a service to one of three American big tech companies. Yay!

Or you spend 5 minutes reading about them and use a passkey you actually own? Many times, people choose TooBigTech. People are generally waaaay too lazy to even consider spending some brain cycles on that.

Unless the service you are trying to log in to requires you to only use an approved authenticator, as is explicitly supported by the spec[1].

[1] "To be very honest here, you risk having KeePassXC blocked by relying parties." https://github.com/keepassxreboot/keepassxc/issues/10407#iss...

More examples here https://fy.blackhats.net.au/blog/2025-12-17-yep-passkeys-sti...

Re: Microsoft suspends dev accounts for high-profile open source projects

#119
post #59

Earlier quoted context omitted.

Even if they did, it didn't work.

As the strongest OS advocate who has not ran Windows in a quarter century and is posting this over a Wireguard link; the is some double standards here. A corporate VPN vender who did not ensure they received all notifications from Microsoft regarding a certificate that effectively let's them root millions of computers would be a strong signal of concern.

It goes both ways. Probably both parties are partially to blame here. But it is clear that this corporation did not provide a sensible support channel for such an important project to resolve the situation quickly.

Re: Microsoft suspends dev accounts for high-profile open source projects

#120
post #59

Earlier quoted context omitted.

As the strongest OS advocate who has not ran Windows in a quarter century and is posting this over a Wireguard link; the is some double standards here. A corporate VPN vender who did not ensure they received all notifications from Microsoft regarding a certificate that effectively let's them root millions of computers would be a strong signal of concern.

It goes both ways. Probably both parties are partially to blame here. But it is clear that this corporation did not provide a sensible support channel for such an important project to resolve the situation quickly.

Yes 100% Microsoft is at fault, I just ment anyone working with them should expect at least communication problems and needs to work to keep the channels open.
Post reply on HN