Microsoft is pivoting its company culture to make security a top priority, President Brad Smith testified to Congress on Thursday, promising that security will be “more important even than the company’s work on artificial intelligence.”

Satya Nadella, Microsoft’s CEO, “has taken on the responsibility personally to serve as the senior executive with overall accountability for Microsoft’s security,” Smith told Congress.

His testimony comes after Microsoft admitted that it could have taken steps to prevent two aggressive nation-state cyberattacks from China and Russia.

According to Microsoft whistleblower Andrew Harris, Microsoft spent years ignoring a vulnerability while he proposed fixes to the “security nightmare.” Instead, Microsoft feared it might lose its government contract by warning about the bug and allegedly downplayed the problem, choosing profits over security, ProPublica reported.

This apparent negligence led to one of the largest cyberattacks in US history, and officials’ sensitive data was compromised due to Microsoft’s security failures. The China-linked hackers stole 60,000 US State Department emails, Reuters reported. And several federal agencies were hit, giving attackers access to sensitive government information, including data from the National Nuclear Security Administration and the National Institutes of Health, ProPublica reported. Even Microsoft itself was breached, with a Russian group accessing senior staff emails this year, including their “correspondence with government officials,” Reuters reported.

  • Burn_The_Right@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    21 days ago

    Why in the absolute fuuuuuck would a “secure” computer with sensitive data be running motherfucking Windows?! Linux is easy enough for pretty much any Windows user in an office environment to handle these days. There’s just no excuse for sensitive business to ever be done on Windows at this point.

    • GoodEye8@lemm.ee
      link
      fedilink
      English
      arrow-up
      0
      ·
      21 days ago

      The company I work at “supports” Linux in the sense that you’re allowed to use Linux but then you’re essentially on your own when it comes to solving problems. I asked why there’s no proper Linux support and the short answer was “it’s too much trouble”. The long answer was “don’t ask. I don’t want to get into it”.

      So my guess is that setting up a company wide policies and support for Linux is significantly more work than it is for Windows or Mac.

  • phoenixz@lemmy.ca
    link
    fedilink
    English
    arrow-up
    0
    ·
    20 days ago

    Again, just install Linux.

    Dump your windows, install Linux, be done with this nonsense.

  • MarshReaper@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    20 days ago

    In today’s news, Microsoft commits treason against the United States Government.

    !remindme 6 months

    I wonder what the outcome will be.

  • TransplantedSconie@lemm.ee
    link
    fedilink
    English
    arrow-up
    0
    ·
    21 days ago

    Things like this that make me wish we still had the pillory punishment.

    Look at his smug little smile. He knows they are not going to do shit. The smile would fade quickly if he faced 6 hours locked up being pelted with rotting vegetables and fruit in 90° heat.

  • Jayjader@jlai.lu
    link
    fedilink
    English
    arrow-up
    0
    ·
    20 days ago

    Microsoft is pivoting its company culture

    Oh yes, the thing they’re well known for succeeding at.

  • werefreeatlast@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    20 days ago

    So we start…click on the paint brush icon…that tiny colourful thing right under the big ass “W” Icon. Now hit agree on the window asking if you’re secure. Wait a few moments and agree you your 2FA app on your phone. You might have to ask your wife to agree if you are married and bought the license for your spouse only. Cheapskate! Now stay here for a few minutes, we’ve called the 🚓🚨 police.

  • phoenixz@lemmy.ca
    link
    fedilink
    English
    arrow-up
    0
    ·
    20 days ago

    Seriously, why are governments using Microsoft software?

    Don’t give me the nonsense line of “they need support”. There is support for Linux too, and Linux, sorry, works, is reliable and most importantly: a hell of a lot safer than windows. This is example #346269 where Microsoft not only fails to keep windows even remotely safe, but actively sabotaged their customers (in this case the US government) for their own profit.

    And again, “wwheeeyyyrreee sooowwyyyy, pleeeaaasseeee forgif us?” Look! Look! Even our CEO will now be interested in secuwity!

    Seriously I’m so tired of having to read this over and over and he government will just contoi to pump millions over millions into that piece of crap company.

    Switch to Linux already and have computers that you can trust have no known issues that are not being resolved to cover for a few rich assholes!

    • UnderpantsWeevil@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      20 days ago

      Political leadership isn’t technically knowledgeable. It is focused on building large social networks of agreeable people. And Linux is an application by and for techies, not CEOs or social clubs. Consequently, when you’ve got six old white Harvard Alums in a room discussing how to run the country, one of them is going to be a Microsoft C-level and none of them are going to mention an alternative OS (except maybe Apple, in so far as they want their phone to magically integrate with a hostile OS rival).

      Switch to Linux already and have computers that you can trust

      A lot of these Microsoft features are about internal surveillance of staff and accumulating behavior patterns for future automation of service. This is not intended to be about building trust in the OS from the perspective of system security. Its more about finding patterns in human behavior that can be leveraged to reduce the size and pay-scale of your work force.

      To that end, Microsoft is a highly valued partner while the Linux developers are an outright threat.

    • kandoh@reddthat.com
      link
      fedilink
      English
      arrow-up
      0
      ·
      20 days ago

      When I worked with defense contractors in Canada, Microsoft would sue the government whenever it didn’t get awarded a contract it applied for.

    • MojoMcJojo@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      20 days ago

      A much much larger proportion of users are computer illiterate, especially federal employees. On top of that, the vast majority of basic software applications used are the Microsoft suite of Outlook, Word, Excel, PowerPoint, etc. How do you

      1. Retrain an aging workforce to use a new OS.
      2. Retrain to use new software suite for email, docs, etc.
      3. Or rebuild existing software to run on Linux
      4. …there’s more but I’m short on time…

      The ENTIRE US govt runs on Microsoft. That’s a very big pie to rebake. Where do you even begin. I do agree with you, it just feels unsurmountable.

  • TWeaK@lemm.ee
    link
    fedilink
    English
    arrow-up
    0
    ·
    21 days ago

    Microsoft is pivoting its company culture to make security a top priority

    Didn’t they already do that a decade or two ago??

  • reversebananimals@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    21 days ago

    To reinforce the shift in company culture toward “empowering and rewarding every employee to find security issues, report them,” and “help fix them,” Smith said that Nadella sent an email out to all staff urging that security should always remain top of mind.

    Yeah that ought to do it.

    • WhatAmLemmy@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      21 days ago

      Lol. Considering it was senior management that ignored staff, this statement is even fucking dumber than it sounds.

    • schizo@forum.uncomfortable.business
      link
      fedilink
      English
      arrow-up
      0
      ·
      21 days ago

      That’s just barely thoughts-and-prayers level. They could at least schedule a mandatory meeting that interrupts everyone’s day for half an hour.

    • Cosmo@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      21 days ago

      "Of course, fixing these kinds of issues won’t push your product deadlines back at all. But we’ll be thankful to you! "

      • rem26_art@fedia.io
        link
        fedilink
        arrow-up
        0
        ·
        21 days ago

        they could throw a pizza party for their government clients. Less work than fixing the problem

    • Emotet@slrpnk.net
      link
      fedilink
      English
      arrow-up
      0
      ·
      21 days ago

      Same energy as “You have unlimited PTO here, but we also have this nifty little thing called performance metrics”

  • Taleya@aussie.zone
    link
    fedilink
    English
    arrow-up
    0
    ·
    edit-2
    21 days ago

    the funniest part of the fall of MS for me has been the cunts getting so excited about fucking off the home users they forgot one vital thing: C-suite and beancounters run at a home user level. And most infrastructure techs will happily flick to a linux distro come server build time.

    Their current direction has also pretty much killed their use in anything related to media distribution, it’s virtually a detailed list of TPN violations

    • deweydecibel@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      21 days ago

      Their current direction has also pretty much killed their use in anything related to media distribution, it’s virtually a detailed list of TPN violations

      Eh, that’s actually kind of a selling point.

  • 299792458ms@lemmy.zip
    link
    fedilink
    English
    arrow-up
    0
    ·
    21 days ago

    This is like that psychopath GF that lies and pushes you around to test your limits with the evil plan to manipulate you. Every once in a while you can complain about her behavior and then she will bombard you with fake love and forgiveness to push later in the future again.

  • dinckel@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    21 days ago

    Don’t take any of their words for granted. They know exactly what they’ve been doing, and what they’re doing now