4 ms·

That is a... bold assumption to make. Not just for Microsoft but for any large corporation.

lelanthran 3y ago
> That is a... bold assumption to make. Not just for Microsoft but for any large corporation. I dunno; the average project on github isn't code-reviewed, while all the projects at Microsoft are.
giantg2 3y ago
I'm not saying bad code doesn't exist there. My thought is that the percent of bad code increases with volume (or at least higher number of producers). Tens of millions of people committing to Github should mean its more cluttered with garbage than in MS. I at least assume MS has some automated code standard or security scans. That's at least more than nothing.
- dh2022 3y ago
  " I at least assume MS has some automated code standard or security scans." -- that is a .... big assumption.
  - giantg2 3y ago
    No, it really isn't when we're dealing with an organization that is audited for SOC 1/2, DoD, and likely others.
    - clankyclanker 3y ago
      Are you sure? https://arstechnica.com/security/2023/09/hack-of-a-microsoft-corporate-account-led-to-azure-breach-by-chinese-hackers/ https://arstechnica.com/security/2023/09/hack-of-a-microsoft... The Azure-State-Department breach had nearly a half dozen contributing bugs...
      - giantg2 3y ago
        And how does that compare to all the bugs on Github?
    - dh2022 3y ago
      My friend - Chinese secret services read Secretary of Commerce's emails because of Microsoft's security leaks: https://abcnews.go.com/Politics/commerce-secretary-gina-raimondos-emails-hacked-microsoft-cyber/story?id=101201179 https://abcnews.go.com/Politics/commerce-secretary-gina-raim... So yeah, assuming Microsoft systems are up to standard or have security reviews or whatever is a .... big assumption.
      - tmpX7dMeXU 3y ago
        My friend, nobody implied that any of these things result in a foolproof system.
  - lannisterstark 3y ago
    Do you have the exact style of talking in all your comments lol?
dietr1ch 3y ago
Yup, individuals struggling to have impact will cut corners and heavily impact tech debt :P

> That is a... bold assumption to make. Not just for Microsoft but for any large corporation. I dunno; the average project on github isn't code-reviewed, while all the projects at Microsoft are.

giantg2 3y ago

I'm not saying bad code doesn't exist there. My thought is that the percent of bad code increases with volume (or at least higher number of producers). Tens of millions of people committing to Github should mean its more cluttered with garbage than in MS. I at least assume MS has some automated code standard or security scans. That's at least more than nothing.

dh2022 3y ago
" I at least assume MS has some automated code standard or security scans." -- that is a .... big assumption.
- giantg2 3y ago
  No, it really isn't when we're dealing with an organization that is audited for SOC 1/2, DoD, and likely others.
  - clankyclanker 3y ago
    Are you sure? https://arstechnica.com/security/2023/09/hack-of-a-microsoft-corporate-account-led-to-azure-breach-by-chinese-hackers/ https://arstechnica.com/security/2023/09/hack-of-a-microsoft... The Azure-State-Department breach had nearly a half dozen contributing bugs...
    - giantg2 3y ago
      And how does that compare to all the bugs on Github?
  - dh2022 3y ago
    My friend - Chinese secret services read Secretary of Commerce's emails because of Microsoft's security leaks: https://abcnews.go.com/Politics/commerce-secretary-gina-raimondos-emails-hacked-microsoft-cyber/story?id=101201179 https://abcnews.go.com/Politics/commerce-secretary-gina-raim... So yeah, assuming Microsoft systems are up to standard or have security reviews or whatever is a .... big assumption.
    - tmpX7dMeXU 3y ago
      My friend, nobody implied that any of these things result in a foolproof system.
- lannisterstark 3y ago
  Do you have the exact style of talking in all your comments lol?

dietr1ch 3y ago

Yup, individuals struggling to have impact will cut corners and heavily impact tech debt :P