SHA-1 crack just got real: System Center uses it to talk to Linux

When Google revealed last week that it had destroyed the SHA-1 algorithm, it hammered another nail into the venerable algo's coffin. But as we noted in our report on the feat, many applications still use SHA-1. And if you're one of the many Windows shops running Microsoft's System Center Operations Manager Management Server, …

[nijam]

Why would any responsible Linux administrator entrust management rights of any kind to a Microsoft system?

[Swarthy]

If you are using Microsoft to manage Linux

I would think that a compromised hashing algo would be the least of your worries. The malicious SysAd who set up that Frankenstein's Chimera would be your main concern.

[MNGrrrl]

Hi. non-armchair pro here.

> Why would any responsible Linux administrator entrust management rights of any kind to a Microsoft system?

Because the Linux administrator most usually doesn't run the department or signs the support and licensing contracts for Microsoft products that the other 99% of the company uses. Which means more than likely, the people sitting in network operations are sitting at windows workstations. And know windows servers -- because that's what all the departments use, because they know it and it's supported. No matter how munged it gets, Microsoft will fix it with a phone call. Companies like that sort of thing. So the Linux administrator gets told: We need you on our dashboard. Here's the package. Run along now. Don't give me that face.

This is how things work in the real world, not the imaginary one where most open source proponents live. Yes, it *would* be better not to do it. Yes, those solutions really are superior in most regards. I agree! But you will do it because management said so; And they have reason to sit in their chair and say "Make It So, Number One!" Business needs, internal politics, and cost management goals cause sub-optimal choices in this industry all the time. Everywhere. Forever.

"It's the solution Gotham deserves, but not the solution it needs right now."

[J. Cook]

One phrase: 'single pane of glass'

for managing the various systems in the environment, and especially if the company's already blown the wad for System center as opposed to something like Solarwinds Orion or any other number of server management application suites.

SCOM is obviously not perfect- it's a pain in the butt to install, configure, and operate if you've never used it or had good training on it, there's a snootload of 'legacy code' in it from the old SMS and MOM days, and overall it's a shambling, baroque monstrosity.