Microsoft Security-101: Open-Source curriculum | Hacker News Reader

Microsoft Security-101: Open-Source curriculum

github.com

232 pointswirelesslife43 comments

Microsoft also has similar courses on IoT, and Data Science. I found the IoT one really nice [0], and it covers a lot of ground.

[0]: https://github.com/microsoft/IoT-For-Beginners

It looks like they also have one on Generative AI: https://github.com/microsoft/generative-ai-for-beginners/

101 consuming azureopenai more likely

For those who have read it: would you recommend it?

It’s very 101 but covers sensible topics in a sensible order but yeah, lacks a lot of depth.

If you’re looking for a genuinely awesome introduction to the topic I’d recommend this lecture series https://youtube.com/@securityengineering1350?feature=shared

Which accompanies this book https://www.cl.cam.ac.uk/~rja14/book.html

Wow I had no idea this was on YouTube.

This book is the one I always recommended for someone getting started in security.

It’s probably the best book on the topic I’ve ever come across. It’s just an incredibly good mix of practical and approachable and does a great job of teaching you how to think on your own two feet about security which I think is one of the most important aspects.

Thanks, didn't know there were lectures on YouTube, too!

Consider what audience it is for.

Non technical management.

It is a basic introduction for free, there is not much to recommend or not.

If you have basic knowledge on security and topics listed there - it is waste of time. If not then not.

It's the Windows of security. You get to peak and that's about it.

This course covers:

Basic cybersecurity concepts (CIA triad, risks, threats, etc.)

Understanding security controls and their forms

Zero trust and its importance in modern cybersecurity

Key concepts and themes across identity, networking, security operations, infrastructure, and data security

Examples of tools for implementing security controls.

Can you please stop posting summary comments like this?

For explanation, see:

https://news.ycombinator.com/item?id=39572941

https://news.ycombinator.com/item?id=39504137

https://news.ycombinator.com/item?id=39308859

From the guys that got their Azure Master Key stolen due to gross incompetence. That's funny

Same company that ran it's 'container services' on an ancient version of kubernetes with broken isolation

containers are for packaging and deployment NOT for isolation

In this case, that does not prove much.

For big companies like Microsoft it is normal to have both some employees who may be security experts and also thousands of others who not only are ignorant about security but they also do not seek the advice of those who may be more knowledgeable.

So without other information, the fact that some document about security comes from Microsoft cannot be used to guess anything about whether it is valuable or not.

also the Russians got into their senior executives email accounts via some test account by brute forcing passwords

https://www.theverge.com/2024/1/26/24051708/microsoft-hack-r...

The company that had poor security practices for their Azure Cosmos DB cluster.

Haha. This. Except it wasn't stolen they flat out gave it away and sold out America to China. That's why they put so much effort into trying to spin Microsoft as some forward fighter in infosec these days even though anyone with a half of a brain knows that Microsoft is the greatest liability in security/democracy and engaged in espionage against the US. They should stick to what they do best, steal other people's ideas/concepts/some current trend in tech, try and rebrand it as a Microsoft thing and weaponize litigation to capitalize on it.

There is no doubt Microsoft is in cahoots with all US 3 letter agencies. They have connections and systems in place to make it easy for data collection.

However, I don’t think I ever heard of Microsoft engaged in espionage against the US. Elaborate?

Organization proven to use and abuse the security via obscurity model.

Reply on news.ycombinator.com