4 ms·
" I at least assume MS has some automated code standard or security scans." -- that is a .... big assumption.
by dh2022 3y ago
" I at least assume MS has some automated code standard or security scans." -- that is a .... big assumption.
- giantg2 3y agoNo, it really isn't when we're dealing with an organization that is audited for SOC 1/2, DoD, and likely others.
- clankyclanker 3y agoAre you sure? https://arstechnica.com/security/2023/09/hack-of-a-microsoft-corporate-account-led-to-azure-breach-by-chinese-hackers/ https://arstechnica.com/security/2023/09/hack-of-a-microsoft... The Azure-State-Department breach had nearly a half dozen contributing bugs...
- giantg2 3y agoAnd how does that compare to all the bugs on Github?
- dh2022 3y agoMy friend - Chinese secret services read Secretary of Commerce's emails because of Microsoft's security leaks: https://abcnews.go.com/Politics/commerce-secretary-gina-raimondos-emails-hacked-microsoft-cyber/story?id=101201179 https://abcnews.go.com/Politics/commerce-secretary-gina-raim... So yeah, assuming Microsoft systems are up to standard or have security reviews or whatever is a .... big assumption.
- tmpX7dMeXU 3y agoMy friend, nobody implied that any of these things result in a foolproof system.
- lannisterstark 3y agoDo you have the exact style of talking in all your comments lol?