News for hackers. Stuff that matters.

A comment on Microsoft built its own custom Linux kernel for its new IoT service. Parent comment

Re:Microsoft built its own custom Linux kernel for its new I... by 794CD01 on Tuesday April 17, 2018 @10:27AM (#16858609)
Would you trust each doctor to know enough about IT security to be capable of protecting patient data without hiring someone else to run their enterprise IT infrastructure?
[ Parent | on HN ]
Re:Microsoft built its own custom Linux kernel for its new I... by chopin on Wednesday April 18, 2018 @04:14AM (#16865635)
No. But I would expect that the government (or a doctors professional organization on behalf) publishes a list of things he is allowed to use to work with patient data. Windows 10 shouldn't be on the list in my opinion.
[ Parent | on HN ]
Re:Microsoft built its own custom Linux kernel for its new I... by NiveaGeForce on Tuesday April 17, 2018 @10:34AM (#16858687)
Nothing of personal value is logged, when telemetry is set to Basic level.
[ Parent | on HN ]
Re:Microsoft built its own custom Linux kernel for its new I... by chopin on Wednesday April 18, 2018 @04:11AM (#16865623)
Is there any reputable audit of this? Beyond what Microsoft claims?

This is a difficult problem. The software could be audited by an independent third party. However each update needs to be audited as well. Furthermore the binary of the initial state and each subsequent update binary would have to be signed by the auditor in a way allowing independent verification of the signature.

[ Parent | on HN ]