Sos Sosowski (@sos@mastodon.gamedev.place)
mastodon.gamedev.place
Attached: 1 image So, Microsoft is silently installing Copilot onto Windows Server 2022 systems and this is a disaster. How can you push a tool that siphons data to a third party onto a security-critical system? What privileges does it have upon install? Who thought this is a good idea? And most importantly, who needs this? #infosec #security #openai #microsoft #windowsserver #copilot

  • Cyborganism@lemmy.ca
    2·
    7 months ago

    That is fucked.

    I’m already starting to transition to full Linux on my devices with the arrival of Windows 11 and Windows 10 reaching end of life in October next year. I never thought I’d see the day of this happening.

  • Mereo@lemmy.ca
    1·
    7 months ago

    What the hell?!?!?! This is a server OS! It needs to be as light as possible and for the sake of server stability and security, admins carefully choose the installed apps. Microsoft can’t just install new applications on a whim.

    This is fuged up.

    • Couldbealeotard@lemmy.worldEnglish
      2·
      7 months ago

      People in this thread seem to be missing this point.

      This is windows server, not windows 11. The consequences is not “I’ll have an annoying taskbar icon on my home computer”, this is enterprise level interference that could affect large systems and thousands of users.

      Linux Mint isn’t an alternative to windows server.

    • BolexForSoup@kbin.social
      0·
      7 months ago

      No enterprise is going to want to deal with that and realistically they’re the only ones with the pockets to fight that battle. Hope I’m wrong though. Microsoft needs a swift kick in the ass.

      • Jo Miran@lemmy.ml
        0·
        7 months ago

        If introducing Copilot to server degrades service enough to trigger an SLA downstream, you can absolutely bet lawyers will get involved.

        • Monument@lemmy.sdf.orgEnglish
          0·
          7 months ago

          Or if CoPilot starts exfiltrating data to Microsoft so their server farms can ‘analyze’ it.

          I’m not heavily involved in the space, but I’m given to understand that MS isn’t very clear about what happens to your data or how it gets used or shared.

          Perhaps Microsoft will be smart enough not to allow the general public to query trade secrets or government data that’s been pulled via unwanted copilot integration.
          But maybe the ongoing Russian hack of Microsoft will make it irrelevant, because the servers can be accessed directly.
          Or perhaps at some distant time, Microsoft will roll out features or technologies developed using an internal version of CoPilot that has access to all data - including proprietary information from competitors.

          And that’s not even counting what ISP’s will do if they find a way to analyze copilot traffic, or what state actors will do if they can set up MitM attacks for Copilot.

          Honestly, I sort of fear the repercussions, but I look forward to the lawsuits.

  • NotNotMike@programming.dev
    1·
    7 months ago

    In the spirit of these kinds of changes, I’d love to hear some honest Linux distribution recommendations. I’m leaning towards Ubuntu because it is the most widely advertised and UX focused from my perspective. But I’ve also heard good things about Arch. Any others I should be considering?

    I’ll probably not go full Linux any time soon - I want at least one Windows OS to play games on - so whatever option it should be dual-boot friendly.