5 ms·

Azure Misconfiguration Leaks Microsoft Customer Data

• fxtentacle 4y ago
  "The business transaction data included names, email addresses, email content, company name, and phone numbers, and may have included attached files relating to business between a customer and Microsoft or an authorized Microsoft partner." I'll remember that for the next time someone tries to sell me on overpriced cloud services with the argument that Microsoft is better at protecting data than internal IT is. Maybe they are, but then again, they have a billion dollar bullseye painted on their back. Nobody is going to extend any comparable effort to break into a small local business.
  • klysm 4y ago
    > Nobody is going to extend any comparable effort to break into a small local business. Unfortunately, a lot of exploitations don’t need to pick a target first. Many exploitations can be executed by spraying shit on the wall and seeing what sticks.
  • wingmanjd 4y ago
    > I'll remember that for the next time someone tries to sell me on overpriced cloud services Sometimes, that cloud service is also about who's to blame when stuff hits the fan. If my internal IT dept mis-configures something and data leaks, then they're the ones responsible. If my internal IT dept does everything "right" and Microsoft still screws up and data leaks, then Microsoft is the one with the problem. Sadly, data is still leaked either way, but in the latter case, there's (hopefully) some sort of contract with a vendor.
• eurasiantiger 4y ago
  How on earth someone is still using Azure remains a mystery. I haven’t seen one good experience come from using that platform, and I’ve been keeping an eye on it for several years now.