Re:My daughter's school took over my personal Microsoft account
by hn_version_0023 on Saturday February 25, 2023 @01:10PM
(#34938905)
This is exactly spot-on. 20+ years of this and you have a mess of gigantic proportions.
Re:My daughter's school took over my personal Microsoft account
by teddyh on Saturday February 25, 2023 @03:08PM
(#34939948)
> Now the corporate infighting starts
Typical for Microsoft, reportedly: https://bonkersworld.net/organizational-charts
Re:My daughter's school took over my personal Microsoft account
by x0x0 on Saturday February 25, 2023 @03:29PM
(#34940135)
And it's crucial to understand we're well past the point where any one (or likely even a small team) knows all the places that Microsoft auth is entangled with. Thus unknown, undesirable interactions occur just because it's too big for someone to know that the interaction would occur.
Re:My daughter's school took over my personal Microsoft account
by cipheredStones on Saturday February 25, 2023 @07:42PM
(#34941952)
The org chart comic from its original source, instead of a random reupload captioned in Spanish and heavy on the image artifacts: https://bonkersworld.net/organizational-charts
Product A adds a sign in. Product B from another team adds another sign in. Product C,D,E do the same. Each team has some special magic sauce that makes their system work better with their product, but worse with all others.
Now the corporate infighting starts, as management squeezes all these sign-in systems together, and everyone looses if any other but their system wins. So some compromise is created, based more on political prowess than technical requirements. The result is an API from hell, taking fragments from everyone, even if they conflict. Everyone pushes and pulls their existing systems until it fits in the compromise, trying to minimizing damage. Weird cracks appear everywhere.
we've all seen the organizational charts meme:
https://www.euroresidentes.com/tecnologia/noticias-internet/...
Remember how each organization builds a solution based on their organisation. Look at microsoft in the meme. Look at the sign in mess. Understand.
I predict strange, probably exploitable and surely unsolvable problems in the MS sign-in system for at the next decade, just like their programming practices of the '90s had entirely predictable security consequences for a decade when the internet appeared.