Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

washingtonpost.com

Post reply on HN
Print view View original

331–340 of 456 posts

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#331

Post by delfinom »

alternatex wrote: post #257
tacker2000 wrote: post #146

Earlier quoted context omitted.

To be fair exchange works quite well for mail and calendar, it syncs very fast, is easy to set up and the cloud version is easy to administer (i never had to admin an on-prem exchange but ive heard its not fun). Using this infra for teams makes sense since it already works well. As one poster said, its probably via some hidden folder. I wonder what they did with skype, did they actually integrate any of it into teams…

Teams was built from Skype. The fundamental infra for communication (chat, video call) was pulled out of Skype as a separate component and integrated into both. Skype the client is completely sunset, but a part of its back-end will continue to be used.

Skype Skype or Lync that was rebranded Skype Business?

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#332

Post by hnlmorg »

dijit wrote: post #329
hnlmorg wrote: post #328

Earlier quoted context omitted.

I hate Microsoft products as much as the next person, but I don’t think your statement is entirely fair: SharePoint isn’t Windows. It’s a Microsoft product that’s only available for Windows Server. But it’s not Windows. The reason I make that distinction is because if you widen the scope of services available on Linux then you might come a lot closer to the same volume of issues. For example, take a look at how frequ…

Sure, I get the point, a more apt comparison might actually be RedHat though, since they're doing E2E packaging for a product suite. I mean, Linux isn't even Linux - At the risk of invoking a meme: Linux is actually GNU + Linux; and even then there's a web-server on top, and software that it runs. So, a working comparison might be Wikipedia? As far as I understand it; that's the largest CMS on the planet.

Neither Wikipedia nor Redhat are as big targets as Microsoft’s ecosystems. Not even remotely.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#333

Post by dijit »

hnlmorg wrote: post #332
dijit wrote: post #329

Earlier quoted context omitted.

Sure, I get the point, a more apt comparison might actually be RedHat though, since they're doing E2E packaging for a product suite. I mean, Linux isn't even Linux - At the risk of invoking a meme: Linux is actually GNU + Linux; and even then there's a web-server on top, and software that it runs. So, a working comparison might be Wikipedia? As far as I understand it; that's the largest CMS on the planet.

Neither Wikipedia nor Redhat are as big targets as Microsoft’s ecosystems. Not even remotely.

ok, nginx+linux power nearly every website, is that close enough of a sizable target?

As mentioned, even if we exclude websites, Linux is a pretty enormous target. Much more enormous than microsoft - by an order of magnitude or more, yet: we don’t seem to have these kind of issues. Curious, don’t you think?

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#334

Post by delfinom »

galangalalgol wrote: post #108
delfinom wrote: post #79

Earlier quoted context omitted.

Good news. Teams is actually SharePoint. It ain't going anywhere

My company was using slack and mattermost and consolidated to teams... It is so bad.

Unlike Slack and Mattermost. Teams was designed by layers of middle managers at big corporate. Teams is literally everything wrong with big corporate in one package, being shoved by morons on small companies. Overall it's crippling the American economy.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#335

Post by acidburnNSA »

dfex wrote: post #223
oneplane wrote: post #175

Meanwhile, Citrix has been on fire causing much worse things (you can just grab any session you want and become anyone who's already logged in). Who needs to break into SharePoint when you're becoming someone who's already got access... including to everything else (not just SharePoint) It's patchable, but it's been two times in a row now, and patching is always slow and incomplete.

I wonder how widely this affected all 3 of Citrix customers?

Big customers though, like the VA and NIH

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#336

Post by y42 »

poemxo wrote: post #152

We need more Red Hat and less Microsoft in the on-prem enterprise business. These exploitable vulnerabilities are unacceptable when your customers are the likes of DoD. No one considers Google anything less than an impenetrable fortress, but when it's some government entity responsible for keeping American lives safe it's like "ah yeah they probably have a vulnerable on-prem Sharepoint that could easily be pwned." So…

the problem is not Windows' (alleged) insecurity, it's it popularity. if everyone would use red hat, the same thing would happen.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#337

Post by uncertainrhymes »

sigmoid10 wrote: post #322
nosianu wrote: post #307

Earlier quoted context omitted.

I don't get such incomplete, selective, comparisons. The country can't go bankrupt and you just found another one. Yes, when a country messes up they have to actually fix things, there is no way around it. Except getting merged into another country - like my birth country, the GDR, ended up as West Germany's problem (but its people still had to do the work). Also, if big enough companies (and banks) fail, it is the s…

Oh boy. Haven't watched much US news since, like, Reagan, have we? Dumping the debt of your failures on future generations has become somewhat of a competitive sport in politics. Can't really do that in the private sector.

Private equity would like a word...

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#338

Post by mr_toad »

7bit wrote: post #312
poemxo wrote: post #152

We need more Red Hat and less Microsoft in the on-prem enterprise business. These exploitable vulnerabilities are unacceptable when your customers are the likes of DoD. No one considers Google anything less than an impenetrable fortress, but when it's some government entity responsible for keeping American lives safe it's like "ah yeah they probably have a vulnerable on-prem Sharepoint that could easily be pwned." So…

Security aside, what even is an alternative to SharePoint on Linux? There is not one.

Probably because most Linux users aren’t looking to share (or even use) office documents. Linux collaboration happens on wikis, message boards, and Git.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#339

Post by sigmoid10 »

uncertainrhymes wrote: post #337
sigmoid10 wrote: post #322

Earlier quoted context omitted.

Oh boy. Haven't watched much US news since, like, Reagan, have we? Dumping the debt of your failures on future generations has become somewhat of a competitive sport in politics. Can't really do that in the private sector.

Private equity would like a word...

Private equity does not have write access to the money ledger.

Re: Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say

#340

Post by 0xEF »

mr_toad wrote: post #330
kuhsaft wrote: post #221

Earlier quoted context omitted.

Most enterprise PCs are Windows machines and integrate with Microsoft services easily. The only way Microsoft is going to lose the enterprise market is if enterprise PCs move away from Windows. But, for enterprises, the only reasonable migration away from Windows is Mac. JAMF Pro for Mac can be hosted on-premise on Linux. The majority of enterprise software runs on Mac. However, Macs are expensive so it's unlikely to…

> corporations don't want to train users how to use Linux This is a huge factor. There are a lot of people who’ll curl up into a ball if you try and get them to use something new.

I'm in the manufacturing sector, on the integration side of things now, but yes, change is always a battle. The way I see it, the problem is two-fold:

Side 1: the workers, especially the labor portion, are extremely resistant to learning new ways to do things unless you can prove, beyond the shadow of doubt, that the new way will be easier than the old way (aka, less to remember/think about) but also does not diminish the quality of their work or increase the perception that their coworkers might see them as having it easier than them.

Side 2: the people responsible for purchasing and resource allocation often do not know what they are buying. In any shop, if you say "we need new PC's for the office" the first thing the purchaser will do is ask a supplier for a deal on a fleet of Dells because that's just what they've always done. If the company is larger and has an actual IT department, they will just provide Windows PCs because that's what they were trained to support. The alternative, Linux, is never considered because they simply don't know anything about it and it's not being offered by their suppliers anyway, so why learn?

Post reply on HN