Microsoft Blocks Top Open Source Developers, Cites Process Issues
Microsoft has recently come under scrutiny after two prominent open source developers faced unexpected account lockouts. Mounir Idrassi, creator of VeraCrypt, and Jason Donenfeld, the mind behind WireGuard, reported that Microsoft suspended their developer accounts without prior notification.
Account Lockouts Impact Developers
Idrassi revealed his experience on March 30, highlighting that he received no emails or warnings about the suspension. He stated, “I have received no explanation for the termination and their message indicates that no appeal is possible.” Efforts to contact Microsoft yielded only automated replies, leaving him frustrated and without answers.
For Idrassi, the suspension affected not only his ability to sign VeraCrypt drivers but also impacted various other projects at IDRIX. He expressed the seriousness of the situation, stating, “This also prevents me from signing drivers and components for my customers on different projects.”
Similarly, Donenfeld echoed similar frustrations. He attempted to publish an update for WireGuard, only to discover that his account had been deactivated without any warning. On Hacker News, he commented, “No notification at all… I sign in to publish an update, and yikes, account suspended.” His concern was palpable, especially regarding potential vulnerabilities in WireGuard that he could not patch.
Frustrations with Microsoft’s Support System
Donenfeld described his attempts to navigate Microsoft’s support system as challenging. His account access was revoked suddenly, hindering critical updates. Despite having a new code signing certificate and improvements ready for the WireGuard user application, he was met with obstacles.
The appeals process left much to be desired. Donenfeld faced a “catch-22” situation, needing access to file an appeal while his account was inactive. Eventually, he contacted the Azure team, which redirected his appeal to the appropriate department. After weeks of waiting, he learned that the processing of his appeal could take up to 60 days.
Microsoft’s Response and Commitment to Improvement
Pavan Davuluri, President of Windows and Devices at Microsoft, addressed the concerns, assuring that both developers should have their accounts restored soon. He acknowledged that the deactivations were part of account verification procedures associated with the Windows Hardware Program.
- Microsoft notified developers in October 2023 about mandatory account verification.
- Davuluri mentioned efforts to ensure partners were aware through emails and reminders.
- Microsoft’s focus is now on reviewing communication methods to improve developer relations.
In a positive turn of events, after Davuluri’s public acknowledgment, Donenfeld confirmed his account was reinstated, enabling him to release the necessary kernel driver update. Microsoft plans to enhance its communication and support strategies to prevent similar issues in the future.
