No, they did not breach anything through SharePoint. The flaw is that IDIOTS exposed these servers to the Internet. I am very pro holding vendors accountable but this is just stupid. "Pro-tip" btw. SharePoint installations often have the pw sharepoint, sharepoint123, sharepoint-123 and so on in various casing and delimiters.
Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
131–140 of 404 posts
Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
#132One of the first things I do after getting an inquiry from a recruiter or friend referral is lookup the MX record for the company’s email domain. It is an anonymous one-command check to see if they’re a Microsoft shop. If they are, it’s enormous personal red flag. MSFT is very popular so I’m only speaking about my own experience, but I have learned over the course of 20 years that an MSFT IT stack is highly correlate…
Companies that don't use Outlook? All five of them? I've seen companies with varying levels of MS product integration but Outlook is pretty foundational. Now, if a company says they use SharePoint or Teams to store their documentation, run to the hills. Wikis or bust.
> Now, if a company says they use SharePoint or Teams to store their documentation, run to the hills. Wikis or bust.
It's never just Teams or SharePoint or a wiki. It's almost always some abomination created by putting various bits of knowledge on all three. Also, corporate wikis suck because how your team classifies data is almost invariably different from how someone else wants to see it.
SharePoint, for all of its flaws, typically gets used by the major announcement-and-policy makers at a company, because they just want to use MS stuff (primarily out of ignorance of alternatives), so at least it's somewhat coherent for everyone in the company.
Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
#133Earlier quoted context omitted.
Companies that don't use Outlook? All five of them? I've seen companies with varying levels of MS product integration but Outlook is pretty foundational. Now, if a company says they use SharePoint or Teams to store their documentation, run to the hills. Wikis or bust.
God, Teams is absolutely miserable. Video calling on Teams makes you appreciate just how well Zoom works. Teams macOS client? Crashes on startup, even after clearing all of my user data. Teams iOS client? You can join a call by a link, but you can't see the call UI because it's behind the login window. Teams on Firefox? No video support for years , and most recently just glitches out and shows an empty page when tryi…
Over the years I have used teams on Windows, Mac, iOS, Android and various Linux distros (where I was limited to Chrome and Firefox due to lack of an official client). While it is certainly not the greatest tool in the world, I have never encountered issues like these.
Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
#134One of the first things I do after getting an inquiry from a recruiter or friend referral is lookup the MX record for the company’s email domain. It is an anonymous one-command check to see if they’re a Microsoft shop. If they are, it’s enormous personal red flag. MSFT is very popular so I’m only speaking about my own experience, but I have learned over the course of 20 years that an MSFT IT stack is highly correlate…
Companies that don't use Outlook? All five of them? I've seen companies with varying levels of MS product integration but Outlook is pretty foundational. Now, if a company says they use SharePoint or Teams to store their documentation, run to the hills. Wikis or bust.
Wild to see the different experiences here. I haven't worked for a company that uses Outlook in 20+ years.
Recently it's all been gmail/google workspaces.
Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
#135One of the first things I do after getting an inquiry from a recruiter or friend referral is lookup the MX record for the company’s email domain. It is an anonymous one-command check to see if they’re a Microsoft shop. If they are, it’s enormous personal red flag. MSFT is very popular so I’m only speaking about my own experience, but I have learned over the course of 20 years that an MSFT IT stack is highly correlate…
I'm gonna be honest, you sound like a problem employee.
The companies not using Microsoft, are using Google. Which in my experience is equally or measurably worse.
Just personal data points, but every avowed Microsoft hater I've ever worked with has been... difficult. Like a-drag-on-the-team-because-he-refuses-to-use-company-tools difficult.
Edit: How does an aged post on this site go from +4 to -1 in the span of a few minutes?
Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
#136So I once brought down an alerting system using Excel (btw, this story is more about unintended consequences instead of MSFT) - I own an alerting system - For log based alerts, it looks for a keyword e.g. "alert_log" - I make a spreadsheet to track data about alerts and call one of the sheets "alert_log" - Alert system starts going crazy: using tons of CPU, number of alerts processed goes through the roof but not a l…
As a firewall engineer I have to tell people to make sure to disable traffic logs for syslogs from the firewall for this reason.
Reminds me of the time I set up tcpdump to log network traffic on a troublesome server. To save disk space I sent it over SSH to my laptop. Oops!
Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
#137Earlier quoted context omitted.
How oh how did these nuclear weapons facilities manage to function in the days before Exchange and Sharepoint?
Just like everyone else before invention of Email and Document sharing? However, like every other business, no one is willing to slow down velocity for security reasons so now we are here. Unless you have a fix for "Line must go up", market pressures will always cause this.
> market pressures will always cause this.
Market pressures dominate nuclear weapons development?
Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
#138As usual with all these types of posts, people go "HA HA, MICRO$OFT SUCKS" without understanding business practices that keep them afloat. Don't use Exchange? Cool, what should we use instead? Does it support 15 people all the way up to 150000 people? I used to run Exchange cluster for 70k people, is there other mail software out there complete with non-shared disk redundancy? Where the users connect to single endpoi…
[deleted]
Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
#139There needs to be a law that all nuclear and nuclear-adjacent facilities have no connection to the Internet. The fact it's allowed is unbelievable.
Just wait until these places get flooded with vibe coded stuff that even those deploying it have little understanding. What could go wrong!?
Sleep well.
Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws
#140One of the first things I do after getting an inquiry from a recruiter or friend referral is lookup the MX record for the company’s email domain. It is an anonymous one-command check to see if they’re a Microsoft shop. If they are, it’s enormous personal red flag. MSFT is very popular so I’m only speaking about my own experience, but I have learned over the course of 20 years that an MSFT IT stack is highly correlate…
I'm gonna be honest, you sound like a problem employee. The companies not using Microsoft, are using Google. Which in my experience is equally or measurably worse. Just personal data points, but every avowed Microsoft hater I've ever worked with has been... difficult. Like a-drag-on-the-team-because-he-refuses-to-use-company-tools difficult. Edit: How does an aged post on this site go from +4 to -1 in the span of a f…
I don't know man, you're gonna have a very tough crowd if you're gonna try and convince anyone that Teams is as good as Google Meet.