Hacker News Reader

Comment by HenryBemis | Hacker News Reader

Fun fact (which is a fact but not fun at all): every org that has SharePoint has enormous critical/sensitive data all over the place. Anything from trade secrets, future plans, passwords, personal data, etc. So compromising 'one account' means that someone can start roaming on the intranet, start searching for keywords ('password:', 'passport ID', 'home address', 'home number', 'driver's license', etc.) and will collect all the data they need for further attacks.

View on HN

Luckily if these secrets are in Sharepoint, no one will be able to find them, so they are safe.

The only discoverability I have seen work in Sharepoint, is the person who wrote something linking the document directly to a person in a pm.

You can mount it as a network drive. Which means you can run Voidtools Everything on it to insta-search files and grep through wsl.

It's a strange combination of leaking the information to those who shouldn't have it, while denying the information to those who should.

(Denying, through non-discoverability, haphazard access controls, buggy application behavior, and often simply being deleted.)

And that's not my only major objection to the current Microsoft dysfunctional-company software suite. I just realized I'm clenching my teeth, from recalling how harmful that load of shit was, the last time I saw it crippling employee effectiveness.

It isn't only Sharepoint, whatever is used as Wiki documentation source, Sharepoint, Azure DevOps, Confluence, TWiki, you name it.

Turns out it doesn't matter how many security trainings we make them go through.

What if the KPIs are wrong somehow? If people get rewarded for starting and completing projects, but not for security related things?

Then no amount of practice would make any difference?

More like there is not enough liability in place.

In the rest of professions, the reward is to keep their job and business, when compliance isn't ignored.

same with google docs et al. and the one encopassing it all: apple, where everyone puts whatever withot even realizing.

Good luck getting meaningful results from SharePoint search

Reply on news.ycombinator.com