ProPublica
@ProPublica@newsie.social  ·  activity timestamp last week

Microsoft is required to regularly provide U.S. officials with its plan for keeping government data safe from hacking. Yet a copy of the tech giant’s security plan obtained by ProPublica makes no reference to the company’s China-based operations.

https://www.propublica.org/article/microsoft-china-defense-department-cloud-computing-security?utm_source=mastodon&utm_medium=social&utm_campaign=mastodon-post

#News#Microsoft#Tech#Data #China#Cybersecurity#Government #Technology
Michael Vilain
@mvilain@sfba.social replied  ·  activity timestamp last week
@ProPublica Pre-COVID, both Cisco and Zoom used Chinese developers to build and maintain their video conferencing software.

I worked at Cisco briefly as one of the US-citizen admins for their FedRAMP-certified WebEx offering. Part of the FedRAMP certification is that only US-citizens can administer it. Cisco regularly got updates from their Chinese developers that they applied to the ALL their systems.

My manager at Oracle used to work for Oracle's servers that ran US Social Security. They also required US Citizen only.

Microsoft is getting a lot of heat about this. If the developers are in China but the servers that hold the data are in the US and run only by US Citizens, I don't understand what all the fuss is about.