12 ms·
I’m with you on that I prefer not to use MS tech. That said, you might be creating an unhealthy dynamic for yourself by expecting it all crash and burn down. Ob
by notimetorelax 3y ago
I’m with you on that I prefer not to use MS tech. That said, you might be creating an unhealthy dynamic for yourself by expecting it all crash and burn down. Objectively, MS tech still gets the job done.
- croes 3y agoDoesn't matter if they get the job done if one big mistake can hurt millions of people it a bad idea. Mono culture is always a bad idea and thinks like MS cloud services are the basis for creating a technical pandemic.
- blowski 3y agoAh yes, I long for the halcyon days of IT stability… oh wait, business has always been fraught with risk and trade-offs. You get insurance, put mitigations in place, and hope when it does go bad, you can blame Microsoft anyway.
- croes 3y agoEver heard of single point of failure. Yes, you can hack every company but he have to target them one by one. Now you only need to take down MS
- notimetorelax 3y agoI understand your point, but the probability math works against you as the number of platforms grows, unless you have excellent data segregation and access controls. What happens in most cases, each new platform serves as an attack vector to be exploited to gain access to all of the data.
- croes 3y agoAnd now you data segregation and access controls are worthless because you need Azure AD for SSO. The expected value rises.
- Obscurity4340 3y agoI, too, long for Halcyon days.
- vladvasiliu 3y ago> Objectively, MS tech still gets the job done Mostly, if you don't have too high expectations. My employer has had to invest I don't even want to know how much in an EDR (or whatever it's called nowadays) and a slew of services around this circus just to pretend their Windows systems are secure. Didn't catch a home-grown cryptolocker, though, and happily allowed it to encrypt its own files. They mostly use web-bases SAAS applications anyway, so could trivially replace windows with an OS with a better security track record. Plus, AzureAD always seemed kludgy. Until recently, they insisted on having SMS or phone as a second factor for password recovery. Which allowed you to reset the stronger 2nd factor used for auth. They only started supporting Fido tokens like a year or so ago for regular 2fa. Their authenticator is a joke: until recently, you had no idea what you were approving. It still doesn't support group inheritance, so if you base it on your local AD as the source of truth, you have to jump through more hoops and add more ad-hoc groups and maintain them. Good times.