I recall the brief storm that came up ~ 7 months ago with: 'Everything authenticated by Microsoft is tainted' ( https://news.ycombinator.com/item?id=37702095 h

I recall the brief storm that came up ~ 7 months ago with: 'Everything authenticated by Microsoft is tainted' ( https://news.ycombinator.com/item?id=37702095 https://news.ycombinator.com/item?id=37702095 ) ... and thought something significant will definitely come out of this. (It didn't, so far I could tell.) Here in AU it feels most orgs and gov agencies still assume Microsoft is the arbiter and epitome of good security practice, and their products seem to be excluded from serious scrutiny or regular review, as per almost every other vendor. (Google may be another exception, but their attack surface is obviously quite different.)