←back to thread

Foreign hackers breached a US nuclear weapons plant via SharePoint flaws

(www.csoonline.com)
433 points zdw | 2 comments | 21 Oct 25 15:51 UTC | HN request time: 0s | source
Show context
synapsomorphy ◴[21 Oct 25 18:07 UTC] No.45659329[source]▶
Sharepoint is one of the worst, most bug-ridden softwares I've worked with.

It has a bug with Solidworks (3D design suite) that sporadically makes files completely un-openable unless you go in and change some metadata. They are aware of this, doesn't seem to be any limitation preventing them from fixing it, and it has sat unfixed for years.

Microsoft's cloud storage as a whole is an insane tangle where you never know where you'll find something you're looking for or whether it will work. Some things work only in browser, some only in the app, zero enumeration of these things anywhere.

Completely unsurprised and I'm sure there are many more vulnerabilities ripe for the picking.

replies(8): >>45659452 #>>45659548 #>>45659676 #>>45659769 #>>45659872 #>>45660153 #>>45660210 #>>45660325 #
bArray ◴[21 Oct 25 18:14 UTC] No.45659452[source]▶
Microsoft Word online deletes text in Firefox Linux (maybe others too) for at least two years now [1]. The one thing you want a text editor to do is be able to write text into a document, and somehow this bug goes unfixed. You would think it would be priority #1 for paying customers of Business Office 365 - and yet nothing.

It ended up being easier just to switch to paid Overleaf and teach our non-tech members how to write LaTeX and/or use the built-in editor. The documents are beautiful, Overleaf doesn't miss a beat and we are very happy with their solution.

Microsoft should be ashamed - I don't know how anybody would ever consider using them for any serious production work.

[1] https://learn.microsoft.com/en-us/answers/questions/5216132/...

replies(4): >>45659560 #>>45659631 #>>45660301 #>>45666019 #
1. nairboon ◴[21 Oct 25 19:14 UTC] No.45660301[source]▶
That bug has been around for years. I always wondered if that was deliberate. I guess that Microsoft support answer settles the question...

>Sorry for that we may have no enough resources about the Linux environment.

replies(1): >>45668345 #
2. bArray ◴[22 Oct 25 12:55 UTC] No.45668345[source]▶
> That bug has been around for years. I always wondered if that was deliberate. I guess that Microsoft support answer settles the question...

I remember years ago there was a browser demo, some kind of game I think, that would only be played on Internet Explorer. If you changed your User Agent string to be Internet Explorer, the demo would work entirely without issue. I think this was prior to Microsoft getting a large fine for not offering other browser choices.

> >Sorry for that we may have no enough resources about the Linux environment.

That is a difficult to parse sentence. "may" indicates uncertainty about the claim about to be made. "have no enough resources" seems to indicate that there is not enough engineering time available. "about the Linux environment" seems to indicate that it is a knowledge gap. Very strange.