4 ms·

Emphasis being on "embrace" at this point. It's too early to cry wolf yet -- there's not even an obvious way to get from here to "extend".

by pluma 11y ago

blumkvist 11y ago
Depends on where you look in the product portfolio :)
- ZenoArrow 11y ago
  Yeah. I've been really impressed with Microsoft recently. However, reading about the Secure Boot rules for Windows 10 (the Windows 8 rules were fine IMO) left a negative reaction. On the whole I still think they're doing much better than they were.
th0waway 11y ago
not to early to cry wolf, but given MS' history, I would not put it past them to try something.
0x0 11y ago
Sure there is. Add an ActiveDirectory specific auth type to the protocol and watch all non-windows clients fail to log in :)
- mhurron 11y ago
  Just like they killed ldap and kerberos so non-MS OS's couldn't use AD. Oh wait ... In fact, what has MS actually extinguiushed?
  - dec0dedab0de 11y ago
    They tried to extinguish the web, and failed. That is enough to not trust them for a long while still.
  - pgeorgi 11y ago
    The kerberos described in http://web.archive.org/web/20140222133423/http://www.networkworld.com/news/2000/0511kerberos.html http://web.archive.org/web/20140222133423/http://www.network...?
    - sudioStudio64 11y ago
      That was from 2000. Since then they have released all of their protocols as open spec documents. https://msdn.microsoft.com/en-us/openspecifications/default https://msdn.microsoft.com/en-us/openspecifications/default Their kerberos implementation works with heimdal and mit. They used an optinal field to include group membership data so that authorization decisions could be made from the contents of the ticket. https://msdn.microsoft.com/en-us/library/gg604662.aspx https://msdn.microsoft.com/en-us/library/gg604662.aspx I'm just saying. Times have changed. Will they ever be as open as an open source project run by volunteers? No. Have they dramatically improved their position in response to the very real criticisms of their past behavior. Yes.
      - atonse 11y ago
        > Will they ever be as open as an open source project run by volunteers? No. The ASP.NET and other .NET teams beg to differ. Their code (not some mirror) is hosted on Github and Apache licensed. You can fork it just like any other open source project. So yes, parts of Microsoft's tech is actually free and open, for all practical definitions of free and open (the GNU people's pedantic arguments about Apache not withstanding)
        sudioStudio64 11y ago
        Very true. I was just saying that they are always going to be different than some of the more open structures in FOSS land. Not worse...just different. The ASP.net team is kicking major ass.
    - mhurron 11y ago
      The kerberos that I authenticate Linux and Solaris boxes against Active Directory with every day.
dec0dedab0de 11y ago
It's too early to cry wolf yet Wrong. It's too late to automatically assume they've changed their game. They have been making some impressive moves lately, but that doesn't mean they're suddenly trustworthy. there's not even an obvious way to get from here to "extend" just look at all the nonstandard SSH authentication methods that exist across networking devices.

Emphasis being on "embrace" at this point. It's too early to cry wolf yet -- there's not even an obvious way to get from here to "extend".

by pluma 11y ago

Emphasis being on "embrace" at this point. It's too early to cry wolf yet -- there's not even an obvious way to get from here to "extend".

blumkvist 11y ago

Depends on where you look in the product portfolio :)

ZenoArrow 11y ago
Yeah. I've been really impressed with Microsoft recently. However, reading about the Secure Boot rules for Windows 10 (the Windows 8 rules were fine IMO) left a negative reaction. On the whole I still think they're doing much better than they were.

th0waway 11y ago

not to early to cry wolf, but given MS' history, I would not put it past them to try something.

0x0 11y ago

Sure there is. Add an ActiveDirectory specific auth type to the protocol and watch all non-windows clients fail to log in :)

mhurron 11y ago
Just like they killed ldap and kerberos so non-MS OS's couldn't use AD. Oh wait ... In fact, what has MS actually extinguiushed?
- dec0dedab0de 11y ago
  They tried to extinguish the web, and failed. That is enough to not trust them for a long while still.
- pgeorgi 11y ago
  The kerberos described in http://web.archive.org/web/20140222133423/http://www.networkworld.com/news/2000/0511kerberos.html http://web.archive.org/web/20140222133423/http://www.network...?
  - sudioStudio64 11y ago
    That was from 2000. Since then they have released all of their protocols as open spec documents. https://msdn.microsoft.com/en-us/openspecifications/default https://msdn.microsoft.com/en-us/openspecifications/default Their kerberos implementation works with heimdal and mit. They used an optinal field to include group membership data so that authorization decisions could be made from the contents of the ticket. https://msdn.microsoft.com/en-us/library/gg604662.aspx https://msdn.microsoft.com/en-us/library/gg604662.aspx I'm just saying. Times have changed. Will they ever be as open as an open source project run by volunteers? No. Have they dramatically improved their position in response to the very real criticisms of their past behavior. Yes.
    - atonse 11y ago
      > Will they ever be as open as an open source project run by volunteers? No. The ASP.NET and other .NET teams beg to differ. Their code (not some mirror) is hosted on Github and Apache licensed. You can fork it just like any other open source project. So yes, parts of Microsoft's tech is actually free and open, for all practical definitions of free and open (the GNU people's pedantic arguments about Apache not withstanding)
      - sudioStudio64 11y ago
        Very true. I was just saying that they are always going to be different than some of the more open structures in FOSS land. Not worse...just different. The ASP.net team is kicking major ass.
  - mhurron 11y ago
    The kerberos that I authenticate Linux and Solaris boxes against Active Directory with every day.

dec0dedab0de 11y ago

It's too early to cry wolf yet Wrong. It's too late to automatically assume they've changed their game. They have been making some impressive moves lately, but that doesn't mean they're suddenly trustworthy. there's not even an obvious way to get from here to "extend" just look at all the nonstandard SSH authentication methods that exist across networking devices.