• Womble@lemmy.world
      link
      fedilink
      English
      arrow-up
      15
      arrow-down
      2
      ·
      2 months ago

      That seems a bit of a non-story given that its prefaced on “once the attacker has access to your work email”. Yes once they have that they can do very good spear phishing attacks using copilot, but they could easily do them without copilot too.

  • N3Cr0@lemmy.world
    link
    fedilink
    English
    arrow-up
    25
    arrow-down
    3
    ·
    2 months ago

    This 3rd party software company fucked up and M$oft get the pressure, so they act like they are responsible.

    Even the customers fucked up by using a vital piece of software where they cannot test the updates before rollout.

    • geekwithsoul@lemm.ee
      link
      fedilink
      English
      arrow-up
      13
      arrow-down
      5
      ·
      2 months ago

      A third party vendor whose entire business model is predicated on the fact that security is such an afterthought at Microsoft that enterprise customers need to resort to this kind of crap for a bare minimum of security.

        • geekwithsoul@lemm.ee
          link
          fedilink
          English
          arrow-up
          7
          arrow-down
          2
          ·
          2 months ago

          Never said it didn’t. Doesn’t change the fact that Microsoft is notoriously worse by every metric and because of its position in the market is far more potentially damaging. Almost like if you sell an OS as something that can be trusted to run mission critical applications, you probably shouldn’t phone it in when it comes to securing that OS.

          • IsThisAnAI@lemmy.world
            link
            fedilink
            English
            arrow-up
            5
            arrow-down
            12
            ·
            2 months ago

            🙄👌👍

            Definitely just not easier to use even you don’t want to fuck around in the terminal.

              • IsThisAnAI@lemmy.world
                link
                fedilink
                English
                arrow-up
                6
                arrow-down
                4
                ·
                2 months ago

                Contributor to TF and several CNCF projects. You use my code every day. Different tools different jobs twat.

                • R00bot@lemmy.blahaj.zone
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  2 months ago

                  Apologies, I misread your comment as saying you had to use the terminal to use Linux (I was drunk ngl). I still believe Linux is easier to use than Windows with the caveat that the easiest system to use will always be the one you have the most experience with. I switched from MacOS/Windows to Fedora on my personal machine a few months ago and it’s been smooth sailing for me, though I have always used Linux at least somewhat (I work in cyber security), so that has probably helped.

                  Dismissing Linux as a tool for a different job (ie not personal/business computing) is an odd position to take for someone with your experience.

    • deegeese@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      1
      ·
      2 months ago

      This is also MS’s fault because they never provided a proper API for security products like MacOS, so they end up having to run them all inside the kernel.

      The reason for this omission was to give a competitive advantage to their own security products while also being cheaper.

    • corsicanguppy@lemmy.ca
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      3
      ·
      2 months ago

      This 3rd party software company fucked up

      NO.

      Clowntrike didn’t fuck up. They offered an externally-managed service that people allowed into their network because they didn’t really clue in how monumentally stupid this is. You’re blaming the gas station for blowing up your car or the leopards for eating your face. Customers who actually gave them money - the people who struggle with “that’s hot, so don’t touch it” - are a dime a dozen, and clowntrike was just taking advantage of the stupid. This has been the American way since snake oil salesmen during the gold rush.

      We fucked up by not watching our stupider techbro friends better suited to a ward somewhere than a c-suite job. We should have been ridiculing them mercilessly so their shame would make them choose better.

  • emax_gomax@lemmy.world
    link
    fedilink
    English
    arrow-up
    17
    arrow-down
    2
    ·
    2 months ago

    Didn’t 5h3y just release an update that bricked dual boot installs. Something tells me someone else should be organising this. Someone that actually cares.

  • Defaced@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    2 months ago

    So are they going to reassess the capability of kernel level drivers like crowdstrike and anticheat solutions like vanguard? Because of they keep this capability open then they’re just asking for another fuck up.

  • mlg@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    2 months ago

    Reminds me of solarwinds doing security seminars after getting breached lol

  • werefreeatlast@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    edit-2
    2 months ago

    Do not use windows or Microsoft solutions. That’s security rule #1.

    For that to work, the hardware vendors should sell hardware that has opensource code that is easily corrected if there’s a security or other type of problem. For that to happen, Microsoft and other such companies need to stop monopolizing technologies. The government should make some changes to their parenting system. For example it should be illegal for companies to force their scientists and engineers to sell their patents automatically to the company. Instead only human people who can invent things should be the owners of the things they invent. If a company wants to keep a hold on that tech, keep the people who invented it happy. Let them own their tech so they can decide to sell it, trade it or make it free. Make it such that only people and not corporations can actually own the patents. Inquire and investigate companies that don’t follow the rules.

    • xavier666@lemm.ee
      link
      fedilink
      English
      arrow-up
      2
      ·
      2 months ago

      it should be illegal for companies to force their scientists and engineers to sell their parents automatically to the company

      It’s already illegal

      /jk

      patents*

    • lud@lemm.ee
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      3
      ·
      2 months ago

      Microsoft didn’t cause the “disaster” though.

        • db2@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          arrow-down
          2
          ·
          2 months ago

          It exists on OSX and Linux too, they just don’t do the thing that took down Windows so they weren’t impacted.

          • WeirdGoesPro@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            6
            arrow-down
            2
            ·
            edit-2
            2 months ago

            Existing and being necessary are two different things. Linux and MacOS are operating systems. Windows is an ad delivery system that masquerades as an operating system.

            • lud@lemm.ee
              link
              fedilink
              English
              arrow-up
              4
              arrow-down
              4
              ·
              2 months ago

              If windows were absolutely perfect with no flaws whatsoever, CrowdStrike wouldn’t be a necessity. I agree with that.

              Unfortunately we live in the real world and no OS is perfect so software like CrowdStrike exists on lots of operating systems.

              Btw, Crowdstrike isn’t necessary but it’s very nice to have for companies. You don’t need real time protection like that on a normal client you use at home.

        • lud@lemm.ee
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 months ago

          It needs that kind of access to fight advanced attacks. It would surprise me if similar EDR programs didn’t have similar access on Linux systems, for example.

          • deegeese@sopuli.xyz
            link
            fedilink
            English
            arrow-up
            1
            ·
            2 months ago

            No, you make a management API for security products that run in user space as root, you don’t use kernel modules.

            • lud@lemm.ee
              link
              fedilink
              English
              arrow-up
              1
              ·
              2 months ago

              Is that the way that EDR is implemented on Linux or are you guessing?

              • progandy@feddit.org
                link
                fedilink
                English
                arrow-up
                1
                ·
                edit-2
                2 months ago

                Currently, cloudstrike offers two methods for Linux: a kernel driver / module and a theoretically safer alternative using epbf (you could call that “kernel level scripting”). Ironically, they triggered a kernel bug using that second option. They did not test all kernels they listed as compatible or something like that.

  • corsicanguppy@lemmy.ca
    link
    fedilink
    English
    arrow-up
    4
    ·
    2 months ago

    ClownTrike: allows people to let leopards eat their face

    Microsoft: “Fucking casual. Hold my zune, watch and learn”

    I’m not worried: Outlook will cack halfway through sending the iCal invites, which are probably not even valid format anyway.

  • RangerJosie@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    arrow-down
    4
    ·
    2 months ago

    Don’t they have an easily hacked screenshot collecting bit of Bloat/Spyware they’re desperately trying to get everyone to use?

    • Vince@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      2 months ago

      Sounds like something they should talk about in some kind of summit about security