[giantg2]

I'm not saying bad code doesn't exist there. My thought is that the percent of bad code increases with volume (or at least higher number of producers). Tens of millions of people committing to Github should mean its more cluttered with garbage than in MS. I at least assume MS has some automated code standard or security scans. That's at least more than nothing.

[dh2022]

" I at least assume MS has some automated code standard or security scans." -- that is a .... big assumption.

[giantg2]

No, it really isn't when we're dealing with an organization that is audited for SOC 1/2, DoD, and likely others.

[clankyclanker]

Are you sure?

https://arstechnica.com/security/2023/09/hack-of-a-microsoft...

The Azure-State-Department breach had nearly a half dozen contributing bugs...

[giantg2]

And how does that compare to all the bugs on Github?

[dh2022]

My friend - Chinese secret services read Secretary of Commerce's emails because of Microsoft's security leaks: https://abcnews.go.com/Politics/commerce-secretary-gina-raim...

So yeah, assuming Microsoft systems are up to standard or have security reviews or whatever is a .... big assumption.

[tmpX7dMeXU]

My friend, nobody implied that any of these things result in a foolproof system.

[lannisterstark]

Do you have the exact style of talking in all your comments lol?