U.S. and key allies accuse China of Microsoft Exchange cyberattacks

Re:U.S. and key allies accuse China of Microsoft Exchange cy... by marcosdumay on Monday July 19, 2021 @10:04AM (#27882763)

If you brought a security door, and the thieves just had to knock on it on the right frequency to open, yes, you would accuse the door seller of fraud.

[ Parent | on HN ]

Re:U.S. and key allies accuse China of Microsoft Exchange cy... by dahfizz on Monday July 19, 2021 @10:19AM (#27882884)

Locks get picked literally all the time, and nobody sues lock makers. Perfect security does not exist.

[ Parent | on HN ]

Re:U.S. and key allies accuse China of Microsoft Exchange cy... by aww_dang on Monday July 19, 2021 @10:27AM (#27882976)

Security can never be perfect. However negligence, bloat and poor design decisions are still a thing. The ideas are not mutually exclusive.

[ Parent | on HN ]

Re:U.S. and key allies accuse China of Microsoft Exchange cy... by dahfizz on Monday July 19, 2021 @10:30AM (#27883012)

And you can confidently claim that Microsoft was negligent here? You have in depth knowledge of their architecture decisions?

How confident are you that you could write an email server that could withstand extended attacks from nation states?

[ Parent | on HN ]

Re:U.S. and key allies accuse China of Microsoft Exchange cy... by aww_dang on Monday July 19, 2021 @10:40AM (#27883151)

So if I personally haven't written an email server, then I shouldn't criticize MS Exchange?

How would that work for something like a Boeing 737 max?

Yes, I am confident I could process text over the network without (42) remote code execution vulns.

https://www.cvedetails.com/vulnerability-list/vendor_id-26/p...

>Microsoft revealed that these vulnerabilities had existed for around 10 years

https://en.wikipedia.org/wiki/Microsoft_Exchange_Server#Vuln...

[ Parent | on HN ]