News for hackers. Stuff that matters.

A comment on Microsoft's open source tools were hacked to steal passwords of AI developers. Parent comment

Re:Microsoft's open source tools were hacked to steal passwo... by black_knight on Tuesday June 09, 2026 @05:25AM (#48458705)
Do you mean that role based access control (RBAC) should be replaced by something else? Or that just the specific RBAC models in use are broken?

I personally think the, perhaps confusingly named, capability based security models are the way of The Future.

[ Parent | on HN ]
Re:Microsoft's open source tools were hacked to steal passwo... by rswail on Tuesday June 09, 2026 @11:29AM (#48462412)
ABAC/Capability and very granular policies for both actions and actions on behalf of others with the right sort of resource-based policies as well. And the apps need to be capability constrained and sandboxed.

Gonna be a hard nut to crack to implement this across the supply chain.

Transitive dependencies are a bitch.

[ Parent | on HN ]