Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

washingtonpost.com

Post reply on HN
Print view View original

271–280 of 456 posts

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#271

Post by shuckles »

Hobadee wrote: post #261
kuhsaft wrote: post #221

Earlier quoted context omitted.

Most enterprise PCs are Windows machines and integrate with Microsoft services easily. The only way Microsoft is going to lose the enterprise market is if enterprise PCs move away from Windows. But, for enterprises, the only reasonable migration away from Windows is Mac. JAMF Pro for Mac can be hosted on-premise on Linux. The majority of enterprise software runs on Mac. However, Macs are expensive so it's unlikely to…

Going Mac in an enterprise environment is a stupid move. Apple is constantly changing how MDM works. One week they'll go all-in on some method of doing things, and tell everyone they must comply or GTFO. The next week they'll completely change their minds and gaslight you, saying that old way is stupid and nobody should have ever used it ever. Then they will put in blocks to prevent it from working. This means all th…

Hard to square this with every startup after ~2006 running a substantial, if not majority, Mac fleet. In addition to the major tech companies.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#272

Post by hollander »

jve wrote: post #267
poemxo wrote: post #152

We need more Red Hat and less Microsoft in the on-prem enterprise business. These exploitable vulnerabilities are unacceptable when your customers are the likes of DoD. No one considers Google anything less than an impenetrable fortress, but when it's some government entity responsible for keeping American lives safe it's like "ah yeah they probably have a vulnerable on-prem Sharepoint that could easily be pwned." So…

> when more secure (Linux-based) options are far cheaper and widely deployed Hold on, we are talking about SharePoint here. I don't know any software that could replace it, that is allowing office suite to collaborate in a way SharePoint Server does it (versioning, concurrent editing, online editing, workflows, customizations, OneDrive, IRM, compliance, search etc.) Even in a windows environment. Can you name more se…

Google Workspace

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#273

Post by mindwok »

buyucu wrote: post #260

I don't understand why anyone uses SharePoint. The product is extremely low quality. I have never met a happy SharePoint user. Now we also learn that it's insecure as well as having a horrible user experience.

It’s similar to Salesforce, Dynamics etc, they rarely achieve what they promise - the entire business is making executives feel like they’re transforming the business without taking on any risk.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#274

Post by hollander »

dralley wrote: post #230
LoganDark wrote: post #153

Earlier quoted context omitted.

Could be that Microsoft can navigate all the regulatory bullshit that surrounds anything government. I don't know of anyone doing that for anything Linux.

There's tons of Red Hat in federal IT, that's not the issue. It's just that Microsoft dominates the client-facing software business, and Red Hat has minimal presence there so while you might see RHEL desktops at e.g. NASA you're unlikely to see them anywhere else, and there's no real open source equivalent of SharePoint or Office out there. Maybe [0] will be one, eventually, but it would take a long long time to repl…

> Schleswig-Holstein, one of Germany’s 16 states, on Wednesday confirmed plans to move tens of thousands of systems from Microsoft Windows to Linux. The announcement follows previously established plans to migrate the state government off Microsoft Office in favor of open source LibreOffice.

https://arstechnica.com/information-technology/2024/04/germa...

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#275

Post by pumplekin »

rahkiin wrote: post #259
sherr wrote: post #249

Earlier quoted context omitted.

"Hardware support for Linux PCs is poor and lacks the manageable of Windows PCs with Active Directory and GPO, or JAMF for Macs. Enterprise software usually doesn't support Linux. Linux PCs are uncommon for personal use and corporations don't want to train users how to use Linux." I would dispute the "hardware support" comment. Linux has pretty good hardware support nowadays. And "enterprise" software is a vague term…

There are still plenty of issues with bluetooth, batteries, microphones, gpus, touchpads etc when doing a clean install of Ubuntu on any random laptop.

True. But larger orgs don't buy "random laptops". The trick is to just buy laptops where you know everything works, and the company making them has a commitment to Linux.

Buy your linux laptop fleet from Framework, System76, Starlabs etc and you won't have any problems like that. You might have OTHER problems, but not that one.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#276

Post by zwnow »

poemxo wrote: post #152

We need more Red Hat and less Microsoft in the on-prem enterprise business. These exploitable vulnerabilities are unacceptable when your customers are the likes of DoD. No one considers Google anything less than an impenetrable fortress, but when it's some government entity responsible for keeping American lives safe it's like "ah yeah they probably have a vulnerable on-prem Sharepoint that could easily be pwned." So…

> Isn't security the number one priority in those spaces?

No. Quick iterations and output output output. Security is one of the least concerns in any company I have ever worked in.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#277

Post by chrismsimpson »

Hobadee wrote: post #261
kuhsaft wrote: post #221

Earlier quoted context omitted.

Most enterprise PCs are Windows machines and integrate with Microsoft services easily. The only way Microsoft is going to lose the enterprise market is if enterprise PCs move away from Windows. But, for enterprises, the only reasonable migration away from Windows is Mac. JAMF Pro for Mac can be hosted on-premise on Linux. The majority of enterprise software runs on Mac. However, Macs are expensive so it's unlikely to…

Going Mac in an enterprise environment is a stupid move. Apple is constantly changing how MDM works. One week they'll go all-in on some method of doing things, and tell everyone they must comply or GTFO. The next week they'll completely change their minds and gaslight you, saying that old way is stupid and nobody should have ever used it ever. Then they will put in blocks to prevent it from working. This means all th…

You could argue changes to MDM strategy is indicative of new threat vectors appearing

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#279

Post by mschuster91 »

shuckles wrote: post #271
Hobadee wrote: post #261

Earlier quoted context omitted.

Going Mac in an enterprise environment is a stupid move. Apple is constantly changing how MDM works. One week they'll go all-in on some method of doing things, and tell everyone they must comply or GTFO. The next week they'll completely change their minds and gaslight you, saying that old way is stupid and nobody should have ever used it ever. Then they will put in blocks to prevent it from working. This means all th…

Hard to square this with every startup after ~2006 running a substantial, if not majority, Mac fleet. In addition to the major tech companies.

Startups rarely use MDM solutions, that's a thing when you hit >> 1000 users because you need dedicated teams to hand-hold the MDM.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#280

Post by ryanjshaw »

hollander wrote: post #272
jve wrote: post #267

Earlier quoted context omitted.

> when more secure (Linux-based) options are far cheaper and widely deployed Hold on, we are talking about SharePoint here. I don't know any software that could replace it, that is allowing office suite to collaborate in a way SharePoint Server does it (versioning, concurrent editing, online editing, workflows, customizations, OneDrive, IRM, compliance, search etc.) Even in a windows environment. Can you name more se…

Google Workspace

This is SharePoint on-premise, so Google Workspace isn’t a good comparison?

Also, even if we do look at cloud: Workspace isn’t bad (exception: sheets vs Excel), but SharePoint is the center of Teams, Power Platform, PowerBI… to replace M365 with Workspace means a lot of research, setup and testing of 3rd party alternatives to the above.

If you’ve ever worked in a well configured Microsoft stack, nothing beats the integration.

There’s no reason to believe Workspace would be more secure if it had the same feature set/integration configured.

Post reply on HN