In some cases, this will mean prioritizing security above other things we do, such as releasing new features or providing ongoing support for legacy systems.
Hopefully this doesn’t go the Apple direction where “security” becomes the catch-all defence for anti-consumer business practices.
Good for them. Know who else prioritizes security? Me doing Kon-Mari on half my software tools & reinstalling only the ones that bring joy onto a Linux distro. good god it’s so much easier now.
I just installed Linux Mint for the first time. As a life long Windows user it’s more intuitive than Windows 11, the install and setup was easier than I’ve ever had doing a fresh install off windows, and I was able to connect to my media tower (still running Windows 10) faster and with less hassle than using a Windows machine.
The only thing that was more difficult was having to look up where to find the setting in Steam for “please provide me Linux versions of games that don’t officially support it.”
His testimony comes after Microsoft admitted that it could have taken steps to prevent two aggressive nation-state cyberattacks from China and Russia.
According to Microsoft whistleblower Andrew Harris, Microsoft spent years ignoring a vulnerability while he proposed fixes to the “security nightmare.” Instead, Microsoft feared it might lose its government contract by warning about the bug and allegedly downplayed the problem, choosing profits over security, ProPublica reported.
Honestly they’ll probably redo it with a different name & hide that they’re doing it. A year from now when the PR crisis blows over. (LOOK OLYMPICS!) Let’s be honest. The cost of these things for a tech giant is a fine they can pay, 10y from now
Management is the weakest link in any organisation.
All they have to do is just listen to the smart people on their team and collect a big paycheque, take credit when work goes well and blame the staff when work goes bad.
If they try to use their own ideas to run the business, this is what happens.
In my experience Software Engineers working in ML are, for the most part, also drinking their own Cool Aid, and need pushback from the rest of the company to keep them in check. So management also needs to know which smart people to listen to.
🤖 I’m a bot that provides automatic summaries for articles:
Click here to see the summary
Instead, Microsoft feared it might lose its government contract by warning about the bug and allegedly downplayed the problem, choosing profits over security, ProPublica reported.
This apparent negligence led to one of the largest cyberattacks in US history, and officials’ sensitive data was compromised due to Microsoft’s security failures.
Even Microsoft itself was breached, with a Russian group accessing senior staff emails this year, including their “correspondence with government officials,” Reuters reported.
Smith described the SFI as “a multiyear endeavor” focusing all of Microsoft’s efforts developing products and services “on achieving the highest possible standards for security.”
He warned that online threats are always evolving but said that Microsoft was committed to grounding projects in core cybersecurity tenets that would prioritize security in product designs and ensure that protections are never optional and always enabled by default.
In 2021, Smith told Congress that “there was no vulnerability in any Microsoft product or service that was exploited” in that cyberattack, while arguing that “customers could have done more to protect themselves,” ProPublica reported.
“dedicating the equivalent of 34,000 full-time engineers to what has become the single largest cybersecurity engineering project in the history of digital technology,”
What does this mean? Are they having it done by 50,000 part timers? Or are they just asking bing chat to churn out security solutions for them?
The non-cynical answer is that they’re counting contractor/vendor time in this full time equivalent answer. Which would probably be a good thing, because I imagine that the best people in cybersecurity aren’t actually employees of Microsoft.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@beehaw.org
A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.
Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.
m$ just got away with another slap on the wrist. Being lax and purely driven by money is rewarded in the land of pseudo a capitalism.
Anti Commercial-AI license
Nothing pseudo about it. This is the natural progression of capitalism.
Hopefully this doesn’t go the Apple direction where “security” becomes the catch-all defence for anti-consumer business practices.
Sounds like the old Microsoft attitudes are alive and well.
I say BS.
Good for them. Know who else prioritizes security? Me doing Kon-Mari on half my software tools & reinstalling only the ones that bring joy onto a Linux distro. good god it’s so much easier now.
I just installed Linux Mint for the first time. As a life long Windows user it’s more intuitive than Windows 11, the install and setup was easier than I’ve ever had doing a fresh install off windows, and I was able to connect to my media tower (still running Windows 10) faster and with less hassle than using a Windows machine.
The only thing that was more difficult was having to look up where to find the setting in Steam for “please provide me Linux versions of games that don’t officially support it.”
Soo… what does this mean for the Windows Recall feature?
Means nothing to Recall.
It’s been recalled
Happy cake day!
Honestly they’ll probably redo it with a different name & hide that they’re doing it. A year from now when the PR crisis blows over. (LOOK OLYMPICS!) Let’s be honest. The cost of these things for a tech giant is a fine they can pay, 10y from now
Yeah, they just pissed off the only area that can literally sink them tomorrow…no shit they actually care now.
That’s what happens if you let business idiots run everything
Management is the weakest link in any organisation.
All they have to do is just listen to the smart people on their team and collect a big paycheque, take credit when work goes well and blame the staff when work goes bad.
If they try to use their own ideas to run the business, this is what happens.
In my experience Software Engineers working in ML are, for the most part, also drinking their own Cool Aid, and need pushback from the rest of the company to keep them in check. So management also needs to know which smart people to listen to.
Well, that would be literally none of the ML programmers because so far its done nothing useful for society but waste electricity
Fairly sure there are some decent societal goods in outcomes around medical research and engineering
The best management is the one that also gets their hands dirty.
🤖 I’m a bot that provides automatic summaries for articles:
Click here to see the summary
Instead, Microsoft feared it might lose its government contract by warning about the bug and allegedly downplayed the problem, choosing profits over security, ProPublica reported.
This apparent negligence led to one of the largest cyberattacks in US history, and officials’ sensitive data was compromised due to Microsoft’s security failures.
Even Microsoft itself was breached, with a Russian group accessing senior staff emails this year, including their “correspondence with government officials,” Reuters reported.
Smith described the SFI as “a multiyear endeavor” focusing all of Microsoft’s efforts developing products and services “on achieving the highest possible standards for security.”
He warned that online threats are always evolving but said that Microsoft was committed to grounding projects in core cybersecurity tenets that would prioritize security in product designs and ensure that protections are never optional and always enabled by default.
In 2021, Smith told Congress that “there was no vulnerability in any Microsoft product or service that was exploited” in that cyberattack, while arguing that “customers could have done more to protect themselves,” ProPublica reported.
Saved 79% of original text.
Security. Yeah that’s what users complained about… :P
They don’t trust Microsoft but I guess that’s harder to put on their web page.
“dedicating the equivalent of 34,000 full-time engineers to what has become the single largest cybersecurity engineering project in the history of digital technology,”
What does this mean? Are they having it done by 50,000 part timers? Or are they just asking bing chat to churn out security solutions for them?
The non-cynical answer is that they’re counting contractor/vendor time in this full time equivalent answer. Which would probably be a good thing, because I imagine that the best people in cybersecurity aren’t actually employees of Microsoft.