Bypassing airport security via SQL injection

Re:Bypassing airport security via SQL injection by vips7L on Thursday August 29, 2024 @02:08PM (#41393646)

In the case of msft/crowdstrike isn't this exactly the opposite of what HN rallies against? The users installed crowdstrike on their own machines. Why should microsoft be the arbiter of what a user can do to their own system?

[ Parent | on HN ]

Re:Bypassing airport security via SQL injection by advael on Thursday August 29, 2024 @03:30PM (#41394466)

They automatically occupy that position because in practice no user of a microsoft system can audit the entire "supply chain" of that system, unlike one built from open-source components. Any "control" someone has over "their own" system is ultimately incomplete when there is a company that owns and controls the operating system itself and has the sole power to both fix and inspect it

[ Parent | on HN ]

Re:Bypassing airport security via SQL injection by Dalewyn on Thursday August 29, 2024 @07:25PM (#41396383)

>no user of a microsoft system can audit the entire "supply chain" of that system,

Yes you can, you can access the source code to audit it.

https://en.wikipedia.org/wiki/Shared_Source_Initiative

[ Parent | on HN ]

Re:Bypassing airport security via SQL injection by preciousoo on Thursday August 29, 2024 @02:38PM (#41393974)

Microsoft determines who they give root access signing keys to

[ Parent | on HN ]

Re:Bypassing airport security via SQL injection by snarfy on Thursday August 29, 2024 @03:19PM (#41394368)

Because the EU required them to.

[ Parent | on HN ]

Re:Bypassing airport security via SQL injection by preciousoo on Thursday August 29, 2024 @03:46PM (#41394595)

I’ve read that story, it inspired my question. Such a requirement wouldn’t be out of bounds with the regulation

[ Parent | on HN ]