microsoft/omi

View on GitHub ↗ ★ 387 C

Open Management Infrastructure

12 mentions on Hacker News by 11 people: 1 story, 11 comments · first 2016-08-24 · latest 2021-09-15

Mentions per year 12 mentions · busiest year 2021 (10)

20082026

All Stories Comments Newest Top Oldest

yes, checking the secret before setting the uid/gid does seem like "Enhanced security" : https://github.com/microsoft/omi/commit/4ce2cf1cb0aa656b8eb9...
comment by matja · 2021-09-15 · in "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
…from confirming that they exist in Windows docs[2] I can't assess how valid their usage was. [1] - https://github.com/microsoft/omi/commit/edbe231042173018c529... [2] - https://docs.microsoft.com/en-us/windows/win32/api/dpapi/nf-...
comment by mulander · 2021-09-15 · in "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
It's used there: https://github.com/microsoft/omi/blob/e4d72481fa2f805148c9c8... Also note that neither EncryptData nor DecryptData have any way of passing a key in their API. So it's very unlikely that these implementations could be…
comment by formerly_proven · 2021-09-15 · in "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
Looks like they do use pull requests though, I guess only ones from Microsoft employees are accepted. https://github.com/microsoft/omi/pulls
comment by pabs3 · 2021-09-15 · in "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
…of macros, lots of ugly buffer manipulation. But it's tooled for PREFast so you know it's secure! ( https://github.com/microsoft/omi/blob/4ce2cf1cb0aa656b8eb934... ) (j/k... I haven't seen that in ages). Guessing a port of MS's internal…
comment by randomfool · 2021-09-15 · in "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
https://github.com/microsoft/omi/blob/master/CONTRIBUTING.md "Currently, this project is not accepting contributions or pull requests." Last changed Aug 17, 2016.
comment by randomfool · 2021-09-15 · in "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
"EncryptData" https://github.com/microsoft/omi/blob/e4d72481fa2f805148c9c8...
comment by mdriley · 2021-09-15 · in "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
I read all of this: https://github.com/microsoft/omi/blob/master/README.md still don't understand what it does
comment by blibble · 2021-09-15 · in "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
…source' package is Microsoft's. The only recent commit was for "Enhanced security" a month ago: https://github.com/microsoft/omi/commit/4ce2cf1cb0aa656b8eb9...
comment by defaulty · 2021-09-15 · in "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
The apparent fix: https://github.com/microsoft/omi/commit/4ce2cf1cb0aa656b8eb9... Looks like a standard, absolutely gigantic C/C++ project that re-invents absolutely everything including an event loop, http server, XML parser, a C++ tool…
comment by orf · 2021-09-15 · in "Secret" Agent Exposes Azure Customers to Unauthorized Code Execution
For Linux & Co it is called OMI: https://github.com/Microsoft/omi And it is just the API, you can layer osquery or Powershell or Ansible or whatever on top. This free Pluralsight course about Powershell for Linux with its inventor Jeffrey…
comment by okket · 2016-09-28 · in Introducing osquery for Windows