←back to thread

Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

(www.csoonline.com)
433 points zdw | 3 comments | 21 Oct 25 15:51 UTC | HN request time: 0s | source
Show context
synapsomorphy ◴[21 Oct 25 18:07 UTC] No.45659329[source]▶
Sharepoint is one of the worst, most bug-ridden softwares I've worked with.

It has a bug with Solidworks (3D design suite) that sporadically makes files completely un-openable unless you go in and change some metadata. They are aware of this, doesn't seem to be any limitation preventing them from fixing it, and it has sat unfixed for years.

Microsoft's cloud storage as a whole is an insane tangle where you never know where you'll find something you're looking for or whether it will work. Some things work only in browser, some only in the app, zero enumeration of these things anywhere.

Completely unsurprised and I'm sure there are many more vulnerabilities ripe for the picking.

replies(8): >>45659452 #>>45659548 #>>45659676 #>>45659769 #>>45659872 #>>45660153 #>>45660210 #>>45660325 #
1. aidos ◴[21 Oct 25 18:30 UTC] No.45659676[source]▶
We sync content to MS hosted Sharepoint using rsync. When the file arrives, they change the internal metadata inside the file, which changes the checksum, which causes rsync to think the content is different and needs syncing again.

Edit to say: this is for MS files like Excel docs

replies(1): >>45660384 #
2. elygre ◴[21 Oct 25 19:20 UTC] No.45660384[source]▶
Is that a supported method?
replies(1): >>45660782 #
3. crmd ◴[21 Oct 25 19:49 UTC] No.45660782[source]▶
Supported by who? Microsoft?

If a file server breaks basic Unix tools it should be unplugged and put in the garbage.