Does this affect the federal government and military? Yes.

It appears that it does not matter if the target is an individual, organization, or government. As long as the legal request is considered valid in the United States, the target or location of the data does not matter.

As an example, the Department of National Defence and Canadian Armed Forces make significant use of Microsoft 365. They have their own defence-tailored instance called Defence 365, which serves as a common cloud infrastructure for collaboration across DND/CAF, with stakeholders and other government departments.

In theory, any data on or using Microsoft or a U.S.-based organization’s products and infrastructure which is not isolated from the Internet could be subpoenaed by the United States government.

The current United States administration has shown to base a significant amount of its foreign and economic policy on dubious or false pretenses with little basis in rational, informed evidence or reality. As a result, we cannot expect that all legal requests received by Microsoft or other tech giants will be evidence-based or rational.

Thus, this revelation represents a significant risk to the Government of Canada and its military.

The text was automatically translated from German into English. The German quotations were also translated in sense.

What’s also alarming, researchers said, is that the hackers have gained access to keys that may allow them to regain entry even after a system is patched.

Once again, a security vulnerability in Microsoft’s software was exploited. And of course: no system is completely secure. But when almost everyone uses the same software, a single flaw becomes a widespread risk. That’s exactly the case with Microsoft Office, SharePoint, or Windows.

That such dominant software poses a security problem is no accident, but a direct consequence of market concentration. A monoculture system is efficient, but fragile. Microsoft’s position in the market is not the result of superior technology, but of decades of dependency.

Digital sovereignty begins with diversity. Anyone who seriously talks about security must also talk about alternatives—and use them. Because only a diverse market truly makes attacks harder.

The text was automatically translated from German into English. The German quotations were also translated in sense.

StatiCrypt - Password protect static HTML:

StatiCrypt uses AES-256 with WebCrypto to encrypt your html string with your long password, in your browser (client side). Download your encrypted string in a HTML page with a password prompt you can upload anywhere (see example).

The text was automatically translated from German into English. The German quotations were also translated in sense.