all 3 comments

sorted by: hot top controversial new old
[โ€“] 13 points 1 year ago* (1 child)

Another reason to ditch Microsoft software in favour of FOSS (free and open source software).

  • source
  • hideshow 1 child comment
  • [โ€“] 8 points 1 year ago

    at least they are speaking the truth, even if they pretend to be otherwise, you can never entrust data sovereignty to a foreign commercial entityโ€ฆ

  • source
  • 19 comments in c/technology@lemmy.world view that post
    [โ€“] 73 points 1 year ago (8 children)

    This is more politics than technology, but it's good info for people living outside the US. You can't trust your data to American companies no matter where they store the data.

  • source
  • hideshow 8 child comments
  • [โ€“] [S] 26 points 1 year ago (5 children)

    Even non-American CSPs with assets in the US would required to cooperate with US regime and affiliated oligarch gangs.

  • source
  • parent
  • hideshow 5 child comments
  • [โ€“] 8 points 1 year ago (4 children)

    this is why you should encrypt everything on cloud services at rest. S3? encrypted. SQS? encrypted. MSSQL? encrypted.

    if you are a developer or SRE you need to make sure your apps are encrypted.

  • source
  • parent
  • hideshow 4 child comments
  • [โ€“] 0 points 1 year ago (2 children)

    Sounds good until you remember that they keep trying to backdoor encryption. Itโ€™s asinine.

    The only good thing the Trump admin JD Vance has done: UK will back down over its demands on Apple for an encryption backdoor

    This isnโ€™t the first time itโ€™s come up. In EU too.

  • source
  • parent
  • hideshow 2 child comments
  • [โ€“] 0 points 1 year ago (1 child)

    The UK government was also getting advice from its own cybersecurity people that the backdoor idea wasn't viable.

    Vance deserves no credit for this or anything else.

  • source
  • parent
  • hideshow 1 child comment
  • [โ€“] 2 points 1 year ago

    Well, I donโ€™t want to credit tumor, oop typo for Trump but Iโ€™ll allow it. So tumor and vance.

    It was more that Encryption is constantly under threat. I donโ€™t know how that gets downvoted.

  • source
  • parent
  • [โ€“] 7 points 1 year ago* (last edited 1 year ago) (1 child)

    As someone in the US who has been in audits where we had to attest to where our data was stored, also wtf.

    Oh reading the article it means non-US sovereignty. Pretty sure anybody in IT at this point should know the US privacy laws are non-existent and US companies are in this position and have been for decades.

  • source
  • parent
  • hideshow 1 child comment
  • [โ€“] 3 points 1 year ago

    The article makes it pretty clear that this is due to a 2018 law called The Cloud Act. I'm sure the US could have tightened the thumbscrews and gotten the information illegally before then, but that's going to be true of every country. No reason to think you can trust any government.

  • source
  • parent
  • [โ€“] 38 points 1 year ago (2 children)

    Isn't this admitting to breaking EU law?

  • source
  • hideshow 2 child comments
  • [โ€“] 24 points 1 year ago (1 child)
  • [โ€“] 24 points 1 year ago

    I can not understand why there is not an enormous backlash from companies about this. All their employees have all the sensitive information on Microsoft servers. But watch out if you bring a USB stick to work...

  • source
  • Oh well, time to fine the shit out of them and roll out Linux across the continent.

  • source
  • [โ€“] 13 points 1 year ago

    Microsoft exec admits it 'cannot guarantee' data sovereignty

    Then you don't get to touch my data (to the extent that I can control who already has my data without my permission...)

  • source
  • [โ€“] 2 points 1 year ago

    The cloud is just someone elseโ€™s computer.

  • source
  • [โ€“] 5 points 1 year ago* (last edited 1 year ago)

    They can. They just don't want to.

  • source
  • 12 comments in c/privacy@lemmy.dbzer0.com view that post
    [โ€“] 50 points 1 year ago* (6 children)

    Thank you for this link.

    Since our previous - competent - IT engineer retired last year and my company hired a young, utterly incompetent MCSE monkey, the company has been more and more falling into the Microsoft cloud trap, what with Office 365, Teams, Sharepoint, and more and more pointless Windows servers to replace our perfectly working but no longer administered Linux machines. It's so bad that this Microsoft jockey caused 25 working machines to be landfilled because they can't be updated to Windows 11.

    And so since this guy was hired, I've been sending choice links to our CEO, who is NOT an idiot and listens to common sense, to convince him that entangling the company with Microsoft is a very bad stragegy, both in terms of finances and data soveignty.

    The argument that Microsoft was an untrustworthy data-hungry company didn't quite land with him. The fact that it now operates in a fascist country certainly had more of an effect on him. I'm hoping your link will turn more gears in his head..

  • source
  • hideshow 6 child comments
  • [โ€“] 10 points 1 year ago

    Have you shared the CSRB report from 2023 with him already?

    It identified a series of operational and strategic decisions by Microsoft that โ€œcollectively point to a corporate culture that deprioritized both enterprise security investments and rigorous risk management.โ€ The report pulls no punches in its assessment, declaring that โ€œthe cascade of Microsoftโ€™s avoidable errors that allowed this intrusion to succeedโ€ was both preventable and unacceptable.

    https://netchoice.org/cyber-safety-review-board-report-exposes-serious-flaws-in-microsofts-security-practices/

  • source
  • parent
  • [โ€“] 5 points 1 year ago

    Sounds like you're with a small company. Great news, it's worse in the bigger ones where the influence and opinions of the working level won't ever reach the ones making such decisions. Over time our computing work has been restricted and tightened so much (for security, you know) that running basic Office stuff can be difficult to do, particularly Excel and macros that we rely on to do our job. The computers have turned into little boxes that are essentially terminals for cloud run crap, and the last new upgrade for one of them (have to replace working equipment with the latest thing for security, again) was given to us with not only no Office installed, it was locked down so hard a user logged in couldn't save a file on their Desktop or in Documents. Also discovered by accident using a flash drive to transfer files can trigger a Bitlocker lockdown lol. Security again, even though all these units are in a secure building. IT by the way is now I think a single guy for us covering the whole region, probably remotely if he can, and I doubt he's better than the last one we had for years who would call someone else to walk him through stuff.

    I don't doubt it's like this in some degree everywhere now.

  • source
  • parent
  • [โ€“] 19 points 1 year ago (2 children)

    Everything you put on a Microsoft service will be accessible by American spies.

  • source
  • hideshow 2 child comments
  • load more comments (1 reply)

    Time to send this link in a certain teams chat.

  • source
  • [โ€“] 7 points 1 year ago

    Lol because AI is an unprofitable bubble the only place companies like Microsoft can go other than using AI to obscure culpability for mass violence (whether it be for "deciding" what Palestinian to murder next or denying lifesaving healthcare) is monetizing surveillance of their customers.

  • source
  • 10 comments in c/technology@lemmy.zip view that post
    [โ€“] 19 points 1 year ago*

    "However unlikely"

    I would assume that it is routine. Regardless of what any exec say.

  • source
  • [โ€“] 8 points 1 year ago

    โ€œFuck around and find outโ€ has become the U.S. motto for international relations lol

  • source
  • [+] 12 points 1 year ago (7 children)
  • [โ€“] 3 points 1 year ago (6 children)

    What? Computing in general is not flawed.

    Cloud computing from a data security standpoint has some huge and I would say, unacceptable, flaws though.

  • source
  • parent
  • hideshow 6 child comments
  • [+] 3 points 1 year ago* (5 children)
  • [โ€“] 4 points 1 year ago (4 children)

    That has not really anything to do with "computing", which can be done regardless of what network is used or even without a network.

    This also does not really affect weather or not cloud computing is flawed or not, since you can access the cloud without wireless connections.

    This all being said, wireless networking is a big security problem, we have just collectively decided that the convenience is worth it.

  • source
  • parent
  • hideshow 4 child comments
  • [+] -2 points 1 year ago* (3 children)
  • [โ€“] 1 point 1 year ago (1 child)

    Yeah?

    This is what happens when system complexity grows unconstrained.

    We may look at a piece of software and say, "right, this software is secure!", but the clock has already started ticking toward the next vulnerability found.

    This does not make the field of computing flawed, but rather the systems we run computing on is flawed.

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (1 reply)
  • 1 comment in c/pulse_of_truth@infosec.pub view that post
    [โ€“] 4 points 1 year ago

    I can, lol

    Ditch Windows, ditch azure, ditch their cloud services. Microsoft is done.

  • source