3 ms·

Hahaha, how stupid must anyone be to deploy SharePoint anywhere near anything of national security relevance! How can it still be a thing, that anyone entrusted

Hahaha, how stupid must anyone be to deploy SharePoint anywhere near anything of national security relevance! How can it still be a thing, that anyone entrusted with such sensitive matter dates to even touch MS products of the kind of SharePoint? That includes the complete MS Office 365 disaster suite, MS Teams and Edge. Sounds like they need to seriously redesign their security policies.

givemeethekeys 1y ago
But, look at everything we get for free! /s
count 1y ago
I have some reaallllly bad news for you on that front.
belter 1y ago
Wait until you hear about the guy storing Top Secret Nuclear documents in the public toilet of his resort....
- timeon 1y ago
  Or the one that invites journalist to Signal group during combat mission.
- belter 1y ago
  Down voting like it never happened... https://upload.wikimedia.org/wikipedia/commons/5/52/Classified_documents_at_Mar-A-Lago_1000-6.jpg https://upload.wikimedia.org/wikipedia/commons/5/52/Classifi...
  - bcrosby95 1y ago
    In general you'll get downvoted if you're talking about any politician or political party. You are allowed to shit on (or advocate for) the government doing stuff tho.
jahewson 1y ago
What would you recommend instead?
- baobun 1y ago
  For security-critical or sensitive situations, auditability should be a requirement. That implies access to source code and capabilty to build it. Decisions like these need to be done from first principles. SharePoint shouldn't even have been a contender here if looked at seriously. Do your own homework.
  - LoganDark 1y ago
    Doesn't Microsoft have government programs that grant source code access for products like Windows and (probably) SharePoint?
  - Havoc 1y ago
    Think you answered just about everything except the question asked
    - rcbdev 1y ago
      I think this guy wants OpenBSD running on a POWER-based Mainframe at every governmental organization.
      - saltcured 1y ago
        Well, if you can't manage text emails with BSD mailx from the CLI, you probably shouldn't be working on nuclear weapons in the first place...
  - mmooss 1y ago
    > For security-critical or sensitive situations, auditability should be a requirement. That implies access to source code and capabilty to build it. Vendors can be accountable without providing source code, for example through contracts specifying performance. I don't know how large Sharepoint's source is, though it has many components and I assume there is quite a bit of code. Auditing the source code of something like Microsoft Office seems almost impossible. > first principles. What does that mean in this context?

givemeethekeys 1y ago

But, look at everything we get for free! /s

count 1y ago

I have some reaallllly bad news for you on that front.

belter 1y ago

Wait until you hear about the guy storing Top Secret Nuclear documents in the public toilet of his resort....

timeon 1y ago
Or the one that invites journalist to Signal group during combat mission.
belter 1y ago
Down voting like it never happened... https://upload.wikimedia.org/wikipedia/commons/5/52/Classified_documents_at_Mar-A-Lago_1000-6.jpg https://upload.wikimedia.org/wikipedia/commons/5/52/Classifi...
- bcrosby95 1y ago
  In general you'll get downvoted if you're talking about any politician or political party. You are allowed to shit on (or advocate for) the government doing stuff tho.

jahewson 1y ago

What would you recommend instead?

baobun 1y ago
For security-critical or sensitive situations, auditability should be a requirement. That implies access to source code and capabilty to build it. Decisions like these need to be done from first principles. SharePoint shouldn't even have been a contender here if looked at seriously. Do your own homework.
- LoganDark 1y ago
  Doesn't Microsoft have government programs that grant source code access for products like Windows and (probably) SharePoint?
- Havoc 1y ago
  Think you answered just about everything except the question asked
  - rcbdev 1y ago
    I think this guy wants OpenBSD running on a POWER-based Mainframe at every governmental organization.
    - saltcured 1y ago
      Well, if you can't manage text emails with BSD mailx from the CLI, you probably shouldn't be working on nuclear weapons in the first place...
- mmooss 1y ago
  > For security-critical or sensitive situations, auditability should be a requirement. That implies access to source code and capabilty to build it. Vendors can be accountable without providing source code, for example through contracts specifying performance. I don't know how large Sharepoint's source is, though it has many components and I assume there is quite a bit of code. Auditing the source code of something like Microsoft Office seems almost impossible. > first principles. What does that mean in this context?