The entire point of programming is that (barring hardware failure and compiler bugs) the computer will always do exactly what it's told
"our" - *base users? I only hear about *base apps shipping tokens in client code or not having auth checks on the server, or whatever
Jumping head first into an entire new "paradigm" (for lack of a better word) where you can bend a clueless, yet powerful servant to do your evil bidding sounds like a recipe for... interesting times.
The fact is that these MCPs are allowed to bypass all existing and well-functioning security barriers, and we cross our fingers and hope they won't be manipulated into giving more information than the previous security barriers would have allowed. It's a bad idea that people are running with due to the hype.
_For this implementation, our engineers chose_ to have fuzzy inputs, fuzzy outputs
There, fixed that for you
I concede that I don't work in industry so maybe I'm just dumb and this is actually really useful but this seems like the exact opposite of what I would want out of my computer about 99.98% of the time.
Nobody cares about the things you’re saying anymore (I do!!). Extract more money. Move faster. Outcompete. Fix it later. Just get a bigger cyber incident insurance policy. User data doesn’t actually matter. Nobody expects privacy so why implement it?
Everything is enshitified, even software engineering.
What cloud? Private SharePoint instances? Accounts? Free Outlook accounts?
Do you have any source on this?
I also can't find the news, but they were hacked a few years ago and the hackers were still inside their network for months while they were trying to get them out. I wouldn't trust anything from MS as most of their system is likely infected in some form