Microsoft's global sprawl under fire from regulators after Windows outage

Re:Microsoft's global sprawl under fire from regulators afte... by bilekas on Saturday July 20, 2024 @05:04PM (#41019897)

I'm not aware of Microsoft signing off on vendor kernal drivers code changes.

Driver signing is not a Quality Assurance measure. It's an identify measure.

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by AstralStorm on Sunday July 21, 2024 @09:20AM (#41024883)

More importantly, the code signing is a security measure. You can in theory vet the signature database by hand preventing the execution of unapproved drivers.

Microsoft normally puts it in revocation mode only, with bad drivers with unfixed holes being blocked.

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by scopeh on Saturday July 20, 2024 @05:30PM (#41020126)

I think it was essentially a data/config file that was corrupt not a new driver kernel. nothing really to be signed and approved by mircosoft.

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by k8sToGo on Saturday July 20, 2024 @05:25PM (#41020073)

You are confusing notarized (what Apple does) and signed (what both do). The latter just allows to confirm legitimacy.

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by FireBeyond on Saturday July 20, 2024 @05:42PM (#41020219)

I guarantee you Apple will take zero responsibility for a failing or issue with third party software, notwithstanding the purported difference between notarized and signed.

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by gruez on Saturday July 20, 2024 @05:05PM (#41019907)

Would the disaster have been prevented if there was no code signing? Or are you arguing that Microsoft should scrutinize code even harder?

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by halfcat on Saturday July 20, 2024 @05:23PM (#41020062)

Microsoft isn’t scrutinizing this code, at all, right? It’s not like they’re doing code reviews of every vendor that does code signing in Windows.

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by gruez on Saturday July 20, 2024 @05:27PM (#41020087)

Not code reviews but the driver is tested

https://en.wikipedia.org/wiki/WHQL_Testing

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by dlahoda on Saturday July 20, 2024 @05:31PM (#41020129)

https://chatgpt.com/share/8eca1a08-062f-4474-9310-95444bab67...

said ms tests drivers

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by thaithrowawayy on Saturday July 20, 2024 @05:39PM (#41020196)

Really? Is this the future of developers to just blindly trust a statistical text generator?

It's cool that you know how to ask a question on ChatGPT. But don't share it as if it's the truth on an obscure, halluncinable factoid.

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by dlahoda on Saturday July 20, 2024 @06:06PM (#41020422)

Added links to answer, they tell that drivers must be signed and tested by microsoft, the WHQL is part of that. Ability to do other way deprecated in 2021.

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by krapp on Saturday July 20, 2024 @05:40PM (#41020210)

>Is this the future of developers to just blindly trust a statistical text generator?

Unfortunately, yes.

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by dlahoda on Saturday July 20, 2024 @06:07PM (#41020430)

why do you claim i doing it blindly?

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by krapp on Saturday July 20, 2024 @06:24PM (#41020578)

As far as I can tell you just asked it a question then posted its response as if you expected it to be fact.

If that isn't blind trust, I don't know what is.

[ Parent | on HN ]

Re:Microsoft's global sprawl under fire from regulators afte... by slowmovintarget on Sunday July 21, 2024 @09:15AM (#41024859)

Drivers yes, virus signature files or configuration files pushed by third parties, no.

[ Parent | on HN ]