3 ms·

> That's exactly the problem - what ARE companies going to do? Migrate OFF windoze? Migrate out of Azure? To Linux? The short answer is...yes. Of course it is

> That's exactly the problem - what ARE companies going to do? Migrate OFF windoze? Migrate out of Azure? To Linux? The short answer is...yes. Of course it isn't easy. Of course it would take time. But it's certainly not impossible. It's certainly been done. I'm not defending MS but the idea that they're some sort of siren and companies can't help themeselves...well, please get me a list of those companies so we short the shocks if they're that incompetent.

Macha 3y ago
Unfortunately even much of the open source world generates and distributes their official builds from Microsoft infrastructure. And even the distros themselves will get the source to do their own builds from the copies hosted on Microsoft infrastructure. So it's not a cure all if you suspect you can't trust GitHub.
the8472 3y ago
It's not the first time that a company got compromised due to microsoft software. This time it was their cloud offering, the previous N times it was AD, Exchange, Outlook, WSUS (for delayed updates), ... And even if they'd move to something else they'd reach for solutions that also get their tentacles into everything because those solutions are convenient during those time windows where they're not exploited.
- EGreg 3y ago
  Wasn’t SolarWinds Microsoft software being compromised too? When the US govt got hacked they actually did something about it government-wide. Started new security standards. For themselves and their vendors like M$
  - stonemetal12 3y ago
    SolarWinds is the name of company that was compromised, and as far as I can tell was never owned by MS.
    - nerdbert 3y ago
      Right, but the question is whether SolarWinds was owned due to an MS vuln. A quick scan of a summary of the SolarWinds story suggests that's not the case, but it's possible that the article I read glossed over too much.
      - marcosdumay 3y ago
        > the question is whether SolarWinds was owned due to an MS vuln No, but the other way around happened. It may be even this hack on the article, it's not very clear. The Solar Winds thing is probably much larger than what we have been allowed to know. I do expect more of it to come out, for decades because the victims just have no way to know they have a problem.

Macha 3y ago

Unfortunately even much of the open source world generates and distributes their official builds from Microsoft infrastructure. And even the distros themselves will get the source to do their own builds from the copies hosted on Microsoft infrastructure. So it's not a cure all if you suspect you can't trust GitHub.

the8472 3y ago

It's not the first time that a company got compromised due to microsoft software. This time it was their cloud offering, the previous N times it was AD, Exchange, Outlook, WSUS (for delayed updates), ... And even if they'd move to something else they'd reach for solutions that also get their tentacles into everything because those solutions are convenient during those time windows where they're not exploited.

EGreg 3y ago
Wasn’t SolarWinds Microsoft software being compromised too? When the US govt got hacked they actually did something about it government-wide. Started new security standards. For themselves and their vendors like M$
- stonemetal12 3y ago
  SolarWinds is the name of company that was compromised, and as far as I can tell was never owned by MS.
  - nerdbert 3y ago
    Right, but the question is whether SolarWinds was owned due to an MS vuln. A quick scan of a summary of the SolarWinds story suggests that's not the case, but it's possible that the article I read glossed over too much.
    - marcosdumay 3y ago
      > the question is whether SolarWinds was owned due to an MS vuln No, but the other way around happened. It may be even this hack on the article, it's not very clear. The Solar Winds thing is probably much larger than what we have been allowed to know. I do expect more of it to come out, for decades because the victims just have no way to know they have a problem.