4 ms·
> but what is the alternative? Google? AWS? Self host? I mean, given this was possible: > used a password spray attack to compromise a legacy non-production t
by blibble 3y ago
> but what is the alternative? Google? AWS? Self host?
I mean, given this was possible:
> used a password spray attack to compromise a legacy non-production test tenant account and gain a foothold, and then used the account’s permissions to access a very small percentage of Microsoft corporate email accounts
pretty much anything is going to be better than letting Microsoft host your email/corporate data
- redavni 3y ago[flagged]
- roca 3y agoGot a reference for that? To be clear: I've never heard of any such thing. I happen to work for Google, but I'm open the possibility that this happened and I didn't hear about it.
- ivlad 3y agoThey probably confuse it with Russians hacking Yahoo and having access to user account admin interface: https://www.csoonline.com/article/560623/inside-the-russian-hack-of-yahoo-how-they-did-it.html https://www.csoonline.com/article/560623/inside-the-russian-...
- redavni 3y agohttps://www.cnn.com/2010/OPINION/01/23/schneier.google.hacking/index.html https://www.cnn.com/2010/OPINION/01/23/schneier.google.hacki...
- deleted 3y ago[deleted]