Live data from Hacker News

Microsoft offers $100k to hack its custom Linux OS

theverge.com

41–50 of 66 posts

Re: Microsoft offers $100k to hack its custom Linux OS

#41

I am amused that MS has its own Linux flavor, but I won't make a joke about it. I won't mention previous attempts at embrace, extend and extinguish. I want to focus on the IoT part. Do not get me wrong. I am glad MS tries to show they care about security in IoT space. Heavens know I don't want to see Starbucks microwave botnet in 2021.

So I guess you don't believe in truly open source and free software. Where everyone, regardless of motive or position, has equal access to it.

Re: Microsoft offers $100k to hack its custom Linux OS

#42

I am amused that MS has its own Linux flavor, but I won't make a joke about it. I won't mention previous attempts at embrace, extend and extinguish. I want to focus on the IoT part. Do not get me wrong. I am glad MS tries to show they care about security in IoT space. Heavens know I don't want to see Starbucks microwave botnet in 2021.

So I guess you don't believe in truly open source and free software. Where everyone, regardless of motive or position, has equal access to it.

Everyone has equal access, but that doesn't imply we ever have to trust anyone that uses or creates free software. You're free to make it, we're free to never use it and not trust you, and if there's anything of value, we'll ensure it gets into the hands of people we trust, and not you. (The use of 'you' here is in the imaginary 3rd person, not you specifically).

Re: Microsoft offers $100k to hack its custom Linux OS

#43

I am amused that MS has its own Linux flavor, but I won't make a joke about it. I won't mention previous attempts at embrace, extend and extinguish. I want to focus on the IoT part. Do not get me wrong. I am glad MS tries to show they care about security in IoT space. Heavens know I don't want to see Starbucks microwave botnet in 2021.

So I guess you don't believe in truly open source and free software. Where everyone, regardless of motive or position, has equal access to it.

I did not argue that. I like their current efforts. But as with most things, best predictor of what people do is checking what they have done in the past. In this case, they have attempted to capture an emerging competing OS and effectively destroy it. I would be silly for me to simply forget the past.

They have access. I am not arguing against it. I have memory of what they have done. Should I just forget it?

Re: Microsoft offers $100k to hack its custom Linux OS

#44

Win win. Flag not captured: MSFT is secure! Flag captured: Linux is insecure.

That's really cynical. It could also just be that bounties like this are a useful way to improve security of software.

Linux's security isn't in question anymore, certainly not among developers who would be choosing whether to use Azure Sphere. Linux has been battle-tested for decades, and Linux already won. This is Microsoft embracing it, for better or for worse. And frankly I'd rather have a Microsoft Linux distro on my fridge than a slimmed down version of Windows.

I'd rather just have a plain old fridge, honestly, but we're talking about IoT OSes right now.

Re: Microsoft offers $100k to hack its custom Linux OS

#45
post #36

Earlier quoted context omitted.

How about we stop using HN's comment section to tell irrelevant-to-the-story personal anecdotes? This is basically the top/most upvoted comment of every article. Surely I can't be the only one to notice this trend?

I don’t see why it’s a problem. If it’s the most up-voted, then clearly people find it interesting.

Not always what you want. I'm sure many people think the pun that the top 50 comments race to make on Reddit is the most hilarious thing in the world. But it also gets in the way of discussion as you have to scroll/collapse your way past.

I think we could do a lot worse than anecdotes, but what I find weird is how the anecdotes on HN are always so smug, like this one. "Heh, my old co-worker thought my 'little hacker buddies' couldn't hack his website ;b Let's just say they put quite a dent in it heh ;b."

Bit of an eye roll.

Re: Microsoft offers $100k to hack its custom Linux OS

#46

Win win. Flag not captured: MSFT is secure! Flag captured: Linux is insecure.

That's really cynical. It could also just be that bounties like this are a useful way to improve security of software. Linux's security isn't in question anymore, certainly not among developers who would be choosing whether to use Azure Sphere. Linux has been battle-tested for decades, and Linux already won. This is Microsoft embracing it, for better or for worse. And frankly I'd rather have a Microsoft Linux distro…

>That's really cynical.

Of course. This is Microsoft. The memory of the culture of Gates and Ballmer is not erased.

>And frankly I'd rather have a Microsoft Linux distro on my fridge than a slimmed down version of Windows

Referencing security of fridges reminded me of this https://www.youtube.com/watch?v=BnKpNVHw-TQ :)

Re: Microsoft offers $100k to hack its custom Linux OS

#49
post #39

Earlier quoted context omitted.

I don’t see why it’s a problem. If it’s the most up-voted, then clearly people find it interesting.

It's a problem exactly because it's up-voted, it's derailing. Happens on so many articles recently. Either derailing by a personal anecdote, or by the "middlebrow dismissal": https://news.ycombinator.com/item?id=4693920 Both are equally derailing. In this case, I would much rather the comments be about the actual OS in question or the trend of big companies crowdsourcing security (penetration testing).

One man's trash is another man's treasure. Otherwise we'd all be reading a website called Hacker Facts, not Hacker News.

These anecdotes provide societal context to the story. Why would Microsoft get the public to harden their product? Surely they have enough resources to do it themselves right?

Because many eyes make light work. Some people would obsess over trying to hack this OS, putting in far more effort than someone paid 9-5 to do it.

Re: Microsoft offers $100k to hack its custom Linux OS

#50

Clearly they've put a lot of work into this and are willing to pay out for a "3rd party audit" so to speak. But my schadenfreude is hoping for an outcome similar to what happened to an old co-worker of mine back in 2005. He was a Windows nut and we were always in a friendly competition about which ecosystem was the better one. One time he had done a bunch of modifications to his own laptop OS, IDS, and tweaking servi…

I feel like his choices by using a device that is for work ... kinda automatically makes me question what if anything we can learn from a technical perspective.

If his judgment is that bad on a basic level, how bad must it be on a technical level?

Post reply on HN