back to article Microsoft 365 brings the shutters down on legacy protocols

Microsoft has warned administrators that legacy authentication protocols will be blocked by default from July, meaning that anyone who hasn't made preparations already could be in for a busy summer. The notification in the Microsoft 365 Message Center this week – MC1097272 – warned that the default settings in Microsoft 365 …

  1. Mentat74
    Linux

    "Secure by Default"

    See icon... ----------------------------------------------------------------------------------->

    1. katrinab Silver badge
      Alert

      Re: "Secure by Default"

      If you are talking about website stuff, the most popular one for Linux is WordPress and that isn't particularly secure.

      1. Stu J

        Re: "Secure by Default"

        Wordpress is absolutely fuck all to do with Linux, it's a PHP-based omnishambles that you can run on anything that can run PHP. Including Windows.

    2. steelpillow Silver badge
      Pint

      Re: "Secure by Default"

      Beat me to it.

      Shame there's no BSD icon to go with Tux. Still, have a free beer.

      1. Havin_it
        Devil

        Shame there's no BSD icon to go with Tux

        Close enough? ----------------------------------------------------------------------------------->

    3. DJV Silver badge
      Facepalm

      Re: "Secure by Default"

      Well, it's something possibly beginning with "S" "by Default" - but I don't think "Secure" is the right "S"...

  2. IGotOut Silver badge

    Thought they were already doing that?

    With so many fuck ups lately it's getting impossible to use a Windows system , let alone be hacked.

    1. Anonymous Coward
      Anonymous Coward

      Re: Thought they were already doing that?

      .. but, but, but .. That would make it actually secure!

      :)

  3. JamesTGrant Silver badge

    Ah explains the Windows Server DHCP borkage. Someone has been a rummaging!

  4. Anonymous Coward
    Anonymous Coward

    So after all these years ..

    .. Microsoft is finally admitting their approach to authentication was atrocious. For decades.

    I wonder what made them change this? Approaching liability? New backdoor protocols now sufficiently propagated?

  5. An_Old_Dog Silver badge

    Security Theatre

    1. What sort of Queen's English-destroying, euphemistic, pea-brained cockwomble writes "non-modern" instead of "old" or "older"? (Hint: the same sort which writes "experience" instead of "program", or "surface" instead of "display" or "exhibit".)

    2. This is just security theatre designed to make you think Microsoft "cares" about good security. Yes, it's good that they're closing these holes, yet based on decades of history, MS will continue their malpattern of creating new protocols with inherent vulnerabilities, vulnerable implementations, and/or bad defaults.

    1. Anonymous Coward
      Anonymous Coward

      Re: Security Theatre

      You write this: 1. What sort of Queen's English-destroying, euphemistic, pea-brained cockwomble writes "non-modern" instead of "old" or "older"? (Hint: the same sort which writes "experience" instead of "program", or "surface" instead of "display" or "exhibit".) and then use the made up word malpattern.

      Bravo!

      1. Anonymous Coward
        Anonymous Coward

        Re: Security Theatre

        "utilise" vs "use"?

        There is a difference, but IMHO too subtle for verbiage addicts to bother identifying, they just choose the longer word.

        1. Anonymous Coward
          Anonymous Coward

          Re: Security Theatre

          "utilise" vs "use"? There is a difference

          To use effectively as against just using; alternatively the degree of toolage involved.

          † the quality of being a tool; obnoxiousness; conceit; hubris [Wiktionary]

    2. Rich 2 Silver badge

      Re: Security Theatre

      My favourite is Vis Studio’s use of “solution” instead of “project”

      God, I hate MS

      1. Anonymous Coward
        Anonymous Coward

        Re: Security Theatre

        God, I hate MS

        Join the (very, very large) club..

      2. Richard 12 Silver badge

        Re: Security Theatre

        To be fair, using a completely different word for a project composed of multiple other projects is a reasonable idea.

        Superproject or subproject often becomes confusing.

    3. ComicalEngineer Bronze badge

      Hava an upvote

      ... purely for using the word "cockwomble"

  6. Anonymous Coward
    Anonymous Coward

    What are the odds that the 3rd party apps will require administrator consent every single time you use them?

    1. Anonymous Coward
      Anonymous Coward

      Given the choice that some of my users constantly try to make, can you explain why that is a bad thing?

  7. Anonymous Coward
    Anonymous Coward

    FrontPage

    The mention of FrontPage brings back memories. I was using it over 20 years ago to manage the website of a search and rescue charity. It worked well via dial-up internet (which is what I had) by sitting entirely on my own PC with a sync'd copy on the public server. Each time I had changes to make, I could do them locally, then hit a button to dial up and sync. The editor itself was a dream; not necessarily as versatile as others, in that you used its proprietary formats, but easy to produce something presentable. Considering a lot of those accessing it wouldn't have the latest browsers, nor fast links, it actually forced me to have a site that was usable by those who needed it - rather than, as happens with many sites today, forces a load of unnecessary (for them) crud onto users. It also managed all the page links in a simple graphic, so moving links around to ensure the most relevant at the time were more easily reached was a breeze. For example, if the SAR team were on a flood rescue, I could move the site focus onto flooding issues; if they were attending the aftermath of an earthquake then the site focus would be on that.

    FP wasn't popular with the tech writers as it didn't follow the latest web/HTML standards - standards that may have given developers more control and MS replaced FrontPage with something that did what every other editor at the time did, dropping the features that I found most useful.

    1. Blitheringeejit
      Devil

      Re: "FP wasn't popular with the tech writers"

      Damn right - the mere mention of it after so long has awoken symptoms of past trauma which I thought my therapist had laid permanently to rest. I'll be asking said therapist for a refund...

  8. EnviableOne

    yes they do security welll

    NTLM is still based on MD4 hashing

  9. Nematode Bronze badge

    .doc and .xls also at the funeral parlour

    It took a random article in a magazine (remember those?) for me to find out only today that as well as Win 10, M$'s protocols bonfire is taking file types for the old Word and Excel (and presumably PowerPoint and Access?) and junking them, about the same month as W10 EOL.

    Ok, anything still using those file types is old, possibly (though I'd hesitate to say "probably") not needed again, or is in current use and can easily be saved as a .***x file (or e.g. .xlsm with macro). Not nearly as well known about as W10 EOL, but people need to assess and if necessary convert. Also stop updates to older Office programs (2010, 2013, 2016 etc) so M$ can't deprecate your old files beneath the radar. Go to settings and remove updates to applications.

    1. Ken Moorhouse Silver badge

      Re: .doc and .xls also at the funeral parlour

      LibreOffice still supports xls and doc without seeming to be a hot potato, kind of demonstrating that it's not the file format that is the issue, it is the program/app you load it into that is the problem.

      1. Yes Me
        Childcatcher

        Re: .doc and .xls also at the funeral parlour

        And there are millions (I mean that) of historical documents in the old formats on obscure, and less obscure, web sites. Not to mention .ppt. These formats will never, ever go away. Thank heavens for LibreOffice, indeed. I haven't bothered with the MS apps for at least ten years.

        1. Nematode Bronze badge

          Re: .doc and .xls also at the funeral parlour

          Yes, I am assuming Libre Office will be at least a rescue tool. Have already used it to convert a couple of xls files which MS Office borked on.

    2. Havin_it

      Re: .doc and .xls also at the funeral parlour

      >M$'s protocols bonfire is taking file types for the old Word and Excel (and presumably PowerPoint and Access?) and junking them, about the same month as W10 EOL.

      I can't find any citation for this. I think it's incorrect. Some older apps are being EOL'd but what you allege is not mentioned anywhere.

      1. navarac Silver badge

        Re: .doc and .xls also at the funeral parlour

        Whether this particular instance is true or not, (.doc/.xls files) this type of action from Microsoft emulates the actions of a certain "1930s Chancellor" burning the books. Without access to legacy formats, history is being disposed of, which is probably what some (esp MAGAtypes of Truth Scandal persuasion), would like.

        1. Havin_it
          Facepalm

          Re: .doc and .xls also at the funeral parlour

          But it's not true, that's the point. So your Godwin (dude, really?) is moot.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like