ONLY months after Microsoft blackmailed British MPs [1, 2, 3] we learn that "Microsoft disrupted British MPs’ parliamentary email system". According to Linux Veda, "a third of MPs in the UK lost access to their email, hosted by Microsoft. The downtime occurred between Monday and Wednesday last week." Why on Earth has our government put sensitive mails about the public and from the public in Microsoft's hands? Are we giving up our digital sovereignty altogether? This is an espionage heaven as Microsoft works very closely with espionage agencies that even blackmail politicians (just like Microsoft does). Some folks have pointed this out to us as there is more coverage of this right now in the British press. Will they finally dump Microsoft and securely self-host their E-mail using Free/libre software, as any technically-proficient person would? Who decides on IT for Parliament anyway? Microsoft lobbyists? Moles? Bribed staff? We previously named such people who were deep in Microsoft's pocket. These decisions are usually political rather than technical.
"These decisions are usually political rather than technical."In the US, the nuclear arsenal and those who can physically access it are still using Microsoft's Swiss cheese OS, Windows XP. This shocked a lot of people and hacked.com wrote: "Windows XP was notoriously insecure even when it was in normal usage, but now that it's ancient, the details on how to hack into an XP network are easy to get. Worse, the Navy insists on keeping this system even as this is public knowledge. It would take time and money, but an upgrade to either a newer version of Windows or to some Linux or other open-source option would make things vastly more secure for the sections of the Navy that are subjected to this policy.
"Now, there will always be those who argue that it's mostly the behavior of users that influences the security of a given network. This could be true, but there are exploits on XP systems which just aren't possible on newer systems, or on Linux."
Anything other than Free/libre software should be assumed not secure. It cannot be proven otherwise. ⬆