703
Microsoft never learns, IT admins rage as a new OneDrive app invades Windows 11 and keeps coming back when you remove it (www.windowslatest.com)
submitted 3 months ago by to c/technology@lemmy.world
126 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 38 points 3 months ago (14 children)

Hey now! I can honestly say Microsoft has never done that with any of my computers!

(Why yes, they do all run Linux. How did you know?)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 14 child comments
    •
  • [+] -24 points 3 months ago* (last edited 3 months ago) (13 children)

    If any of your Linux machines use SystemD, then Microsoft has done that then there’s something to be aware of with those machines. SystemD has a global system ID that can be used like the Windows GDID apparently.

    Edit: not MS

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 13 child comments
    •
  • [–] -1 points 3 months ago (10 children)

    Tell me more. I may have to move to a distro without systemdeez.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 10 child comments
    •
  • [–] 1 point 3 months ago (9 children)
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 9 child comments
    •
  • [–] 5 points 3 months ago* (8 children)

    Okay but correlate that with the same methods and usage and by the same threat actor (MS) in this case.

    Or any of the combination, as a treat

    I'm not saying it's impossible, but it's extremely implausible.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 8 child comments
    •
  • [–] 4 points 3 months ago (7 children)

    Absolutely zero reason a init system needs admin date of birth. Yes separate issue entirely, but it’s showing a trend and the direction things are headed.

    https://blog.bofh.it/debian/id_473

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 15 points 3 months ago* (5 children)

    To be fair, yeah that shit is egregious.

    But that's not at all what I asked you or what you claimed. Those are technically two different things. And not technically like yes or no. Those are entirely different security fronts.

    You've got to back that claim up or take it back, and I have a feeling you'll be taking it back.

    It's okay to be cautious, and it's especially okay to warn others of trajectories that could lean into privacy or security issues, but it's not okay to make shit up.

    Lastly it's no longer an init system. It's a system that happens to handle init.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 2 points 3 months ago (4 children)

    That’s fair. I didn’t mean MS was the threat actor, just the seed from which this grew. I definitely take that back after reading up more on where machine-id grew out of.

    However, I don’t concede that machine-id is theoretical for user fingerprinting. Any software installed can read it, especially a browser. That’s the vector for tracking across the web. Do I have instances of this occurring, no. Seems plausible and the more we can sandbox things, especially “web browsers” (untrusted app runners more like it) the better.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 3 months ago (3 children)

    Probably correct. I'm not going to pretend to have the know how, but I would assume that if this was exploited widely, we'd have heard about it.

    Would it be a great target? Maybe. Attack it. Show us all the love of contributing in hardening it.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 3 months ago (2 children)

    I’m not technically inclined enough to harden against that, nor do ai really have the inclination. But here is a thread on that topic where I even heard about it.

    !privacy@lemmy.ml

    https://lemmy.ml/post/49710604

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 3 months ago* (1 child)

    I did just read I think 90% of that, and it just seems like that person is sour about systemd in general.

    I agree it's not unix/Linux philosophy but it's the best we have.

    Does it do too much? Maybe. I haven't seen that exploited on a large scale in the real world, but it's definitely a golden key.

    There are options. But it's just one of those things. You're pissing in the wind unless you're willing to write it yourself. You can use non systemd distros or even use bsd.

    All that said, you're absolutely right to be concerned, but speaking on it like it's an active vulnerability is dangerous.

    It's also evident that it's reliant on the software you run, it's not systemd that's giving you away, it's your application that you chose to install that's abusing or neglegent of systemd's access.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •