Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Microsoft offers $100k to hack its custom Linux OS

theverge.com

Post reply on HN
Print view View original

61–66 of 66 posts

Re: Microsoft offers $100k to hack its custom Linux OS

#61

Post by cosmiccatnap »

fnord123 wrote: post #46
munchbunny wrote: post #44

Earlier quoted context omitted.

That's really cynical. It could also just be that bounties like this are a useful way to improve security of software. Linux's security isn't in question anymore, certainly not among developers who would be choosing whether to use Azure Sphere. Linux has been battle-tested for decades, and Linux already won. This is Microsoft embracing it, for better or for worse. And frankly I'd rather have a Microsoft Linux distro…

>That's really cynical. Of course. This is Microsoft. The memory of the culture of Gates and Ballmer is not erased. >And frankly I'd rather have a Microsoft Linux distro on my fridge than a slimmed down version of Windows Referencing security of fridges reminded me of this https://www.youtube.com/watch?v=BnKpNVHw-TQ :)

I have to agree. The goal here is to have someone audit the system and still take the high ground regardless of the outcome. It's easy to give them the benefit of the doubt but the more likely answer is that they are hoping to find a way to undermine Linux or find a way to sell it to others and keep the money, this seems like phase one of that rollout.

Re: Microsoft offers $100k to hack its custom Linux OS

#62

Post by rstuart4133 »

A4ET8a8uTh0 wrote: post #13

I am amused that MS has its own Linux flavor, but I won't make a joke about it. I won't mention previous attempts at embrace, extend and extinguish. I want to focus on the IoT part. Do not get me wrong. I am glad MS tries to show they care about security in IoT space. Heavens know I don't want to see Starbucks microwave botnet in 2021.

It might well be embrace, extend, extinguish. But if so, in this instance it isn't Microsoft's doing it.

The embrace started long ago, with things like Samba, a free implementation of vfat, Wine and Active Directory. Extend also started long ago, with things like, getting gcc to run on it, cygwin, the LAMP stack, Firefox - lots of things that let Windows do things only Linux boxes could do, and for free.

Then came extinguish. WinCE followed by WinPhone, and now 1/2 of Azure runs Linux boxes which I guess pretty much signals the fate of Windows on the server arena. Whereas two decades ago most computers an end user interacted with run Windows now they don't.

Re: Microsoft offers $100k to hack its custom Linux OS

#63

Post by xnyan »

gentleman11 wrote: post #48

Did not know they offered a custom Linux OS. What is the strategy here, to make a Chromium like play where the project is open but for practical purposes everyone just uses Chrome? That might not be terrible for the ecosystem

Multiple custom Linux OSes at this point. WSL2 is a custom, mostly transparent Linux VM tailored to fit nicely on desktop windows for developers.

The play (as I see it) was that losing mobile really shook them, and now they have no sacred cows to protect. Developers want and need to develop on linux, so microsoft is making that happen so that they can keep selling software.

Re: Microsoft offers $100k to hack its custom Linux OS

#64

Post by duxup »

wahern wrote: post #56
duxup wrote: post #50

Earlier quoted context omitted.

I feel like his choices by using a device that is for work ... kinda automatically makes me question what if anything we can learn from a technical perspective. If his judgment is that bad on a basic level, how bad must it be on a technical level?

Many people confuse absence of evidence (of insecurity) with evidence of absence (of insecurity). Just look at the SARS-CoV-2 reporting in January and February, where every major media outlet copied stories about how the flu is much worse and that we should really be worrying about the flu. It was patently ridiculous to be making such assertions as the only thing certain at the time was the depth of our uncertainty.…

More specifically I'd question the abilities of anyone who thinks they know about security who then exposes actual work material to some sort of uncontrolled test as described and honestly claims to be sure it is secure.

Anyone who knows about security understands that on a modern system there are so many layers of software / firmware, you never can be 100% sure (well I guess other than powering it off...).

Re: Microsoft offers $100k to hack its custom Linux OS

#65

Post by WhyNotHugo »

cozzyd wrote: post #40
WhyNotHugo wrote: post #27

Earlier quoted context omitted.

McDonald has very different menus in different regions, as does starbucks. I remember visiting NY and being fascinated by many of the options I've never seen in other countries.

In their Chicago HQ (ironically on Randolph Street), McDonald's has an "Global Menu" where they serve a rotating selection of items served around world. It seems that chicken is king in most other countries.

It isn't in the US? What's the top options then?

Re: Microsoft offers $100k to hack its custom Linux OS

#66

Post by cozzyd »

WhyNotHugo wrote: post #65
cozzyd wrote: post #40

Earlier quoted context omitted.

In their Chicago HQ (ironically on Randolph Street), McDonald's has an "Global Menu" where they serve a rotating selection of items served around world. It seems that chicken is king in most other countries.

It isn't in the US? What's the top options then?

Most people get beef burgers at McD's in the US (at least, that's my impression).
Post reply on HN