Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

csoonline.com

Post reply on HN
Print view View original

201–210 of 404 posts

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#201

Post by int_19h »

stackskipton wrote: post #75

As usual with all these types of posts, people go "HA HA, MICRO$OFT SUCKS" without understanding business practices that keep them afloat. Don't use Exchange? Cool, what should we use instead? Does it support 15 people all the way up to 150000 people? I used to run Exchange cluster for 70k people, is there other mail software out there complete with non-shared disk redundancy? Where the users connect to single endpoi…

Exchange has valid arguments for it, but I don't think SharePoint has anything going for it other than "we already got a license for that as part of out package deal". As software in its own right, it's uniquely bad even for Microsoft.

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#202

Post by int_19h »

curvaturearth wrote: post #72
VladVladikoff wrote: post #35

Earlier quoted context omitted.

Every time I need to touch anything made my Microsoft lately I am met with multiple levels of glitchyness, straight up bugs, most frustratingly it’s so excruciatingly slow. Recently I tried to configure a new subdomain to handle mail on 365 and even finding their DKIM configuration section was a mission. Once finding it, I learned that their DNS check fails to properly handle subdomains for email, so you have to put…

But wait! 35% of Microsoft's code is now written by AI so surely it will get better

Yep, especially after laying off several thousand veteran engineers (who, in many cases, were the only ones with a solid understanding of how a given product works as a whole, and why it is the way it is).

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#203

Post by int_19h »

MikeNotThePope wrote: post #90

Reminds me of https://howfuckedismydatabase.com/mssql/ .

MSSQL is one of the few Microsoft products I would consider to be genuinely decent. Like, there's a lot of idiosyncratic stuff there (but then that's also true for Oracle), yet the feature set and stability are good.

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#204

Post by zelphirkalt »

stackskipton wrote: post #75

As usual with all these types of posts, people go "HA HA, MICRO$OFT SUCKS" without understanding business practices that keep them afloat. Don't use Exchange? Cool, what should we use instead? Does it support 15 people all the way up to 150000 people? I used to run Exchange cluster for 70k people, is there other mail software out there complete with non-shared disk redundancy? Where the users connect to single endpoi…

> Sharepoint with another 2 RCEs. Not shocked, the software is terrible. However, it's only software that will stand up under load and let us shard it easily. All open-source software is one of those, runs fine in Homelab, likely falls down under load. Few Open Source Developers want to work on this stuff which I get because it's tedious work interfacing with computer illiterate end users. I'd rather chug sewage then do this work for free.

All just empty claims without showing any evidence. Did you ever set up a multi-client syncthing setup to test your theories about it falling over? Or do you have any references, pointing us to analysis, that shows, that any such tool doesn't hold water? What about some bit torrent setups? There are many options in this space, and one doesn't even have to lump synchronization and viewing in a web UI into one service. If one doesn't, then there are many tools that can accomplish the job better than Sharepoint.

And btw. paid MS Office doesn't even hold water for some 80 people, delivering me my e-mails some half an hour later, at a snail's pace, one or two a minute, while my 1 EUR per month free software using e-mail provider (posteo) manages to give me all my new e-mail almost instantly, the moment I open Thunderbird.

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#205

Post by stickfigure »

fujigawa wrote: post #135
crmd wrote: post #94

One of the first things I do after getting an inquiry from a recruiter or friend referral is lookup the MX record for the company’s email domain. It is an anonymous one-command check to see if they’re a Microsoft shop. If they are, it’s enormous personal red flag. MSFT is very popular so I’m only speaking about my own experience, but I have learned over the course of 20 years that an MSFT IT stack is highly correlate…

I'm gonna be honest, you sound like a problem employee. The companies not using Microsoft, are using Google. Which in my experience is equally or measurably worse. Just personal data points, but every avowed Microsoft hater I've ever worked with has been... difficult. Like a-drag-on-the-team-because-he-refuses-to-use-company-tools difficult. Edit: How does an aged post on this site go from +4 to -1 in the span of a f…

I currently work in a Microsoft shop that has Slack. Everyone uses Slack and all the Microsoft tools, including email, are crickets. This was never the case in the Google shops; we still used email.

Outlook is objectively a terrible experience.

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#207

Post by dataflow »

supportengineer wrote: post #156
crmd wrote: post #94

One of the first things I do after getting an inquiry from a recruiter or friend referral is lookup the MX record for the company’s email domain. It is an anonymous one-command check to see if they’re a Microsoft shop. If they are, it’s enormous personal red flag. MSFT is very popular so I’m only speaking about my own experience, but I have learned over the course of 20 years that an MSFT IT stack is highly correlate…

If a company provides a Mac laptop, that to me is a green flag, if it provides a Windows laptop, that is a red flag. The best company I ever worked at, provided every software engineer both a Mac laptop and a Linux desktop as standard equipment.

What if they provide both?

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#208

Post by xxs »

inopinatus wrote: post #113
necovek wrote: post #95

Earlier quoted context omitted.

I see you build a case for traditional MS product in Exchange, yet this issue is about Sharepoint. Just like with Windows, Microsoft has built a moat with Exchange, but the question is why do all the companies buy into their full ecosystem, especially for anything relating to web technologies (you even bring up Exchange Web Services), because this they do really badly, and Sharepoint seems to be the worst. However, I…

I was running millions of accounts using Postfix/Dovecot on shared-nothing storage with a single MUA-facing endpoint and complex policy options, and that was over a decade ago. Fastmail today would be much bigger again, and they’re on CMU Cyrus. 150k is rookie numbers. Perhaps that was meant ironically to satirise mediocre enterprise thinking?

>Perhaps that was meant ironically to satirise mediocre enterprise thinking?

It's a serious post, unfortunately.

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#209

Post by casey2 »

MisterTea wrote: post #124
necovek wrote: post #95

Earlier quoted context omitted.

I see you build a case for traditional MS product in Exchange, yet this issue is about Sharepoint. Just like with Windows, Microsoft has built a moat with Exchange, but the question is why do all the companies buy into their full ecosystem, especially for anything relating to web technologies (you even bring up Exchange Web Services), because this they do really badly, and Sharepoint seems to be the worst. However, I…

> but the question is why do all the companies buy into their full ecosystem, Old manager I had one told me: "I wish Microsoft made all the software in the world because it works so well together!" He was the guy who bought our company a one-way ticket to O365. He was also woefully tech ignorant and could barley drive software outside of office programs.

Yup, proves the old adage that you never let the tech fluent make tooling decisions for normal people. Nothing would kill a large orgs momentum faster than half their employees stuck reading man pages for trivial tasks. Microsoft is a good black and white, you can do this or you can't. Which works better organizationally than the "I bet I could hack this together in a few weeks" and have everyone wait around so one "10x dev" can feel like a special snowflake

Re: Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

#210

Post by spankibalt »

illusive4080 wrote: post #162
dpifke wrote: post #159

Earlier quoted context omitted.

That's basically WSL. My work laptop is Windows, and the only native applications I run on it are a web browser, Zoom, and the company's VPN software. Everything else runs inside WSL. I greatly prefer Debian to Homebrew, so if I can't run actual Linux, this is (to me) superior to trying to develop on a Mac.

I agree that Debian beats Homebrew. But wouldn’t a persistent Debian container on Mac be better? WSL is nothing more than a container on the system, no? The Mac hardware is vastly superior to most Windows laptops, especially enterprise Windows laptops.

> The Mac hardware is vastly superior to most Windows laptops, especially enterprise Windows laptops.

Man alive, what you mean is normie "Apple-style" Windows laptops with a bit of an "enterprise" makeover. Mobile enterprise workhorses (e. g. Panasonic, Getac)? Apple has no hardware in this segment. Detachables with extended five-year warranties plus certified dual-OS support? Nothing. Some of you fruit afficionados need to get out more.

Post reply on HN