3 ms·
I think yes, you’re off base. Microsoft got their MSA secret stolen, allowing China to read government emails. Do you need another example? https://www.there
by bayindirh 3y ago
I think yes, you’re off base.
Microsoft got their MSA secret stolen, allowing China to read government emails.
Do you need another example?
https://www.theregister.com/AMP/2023/09/06/microsoft_stolen_key_analysis/ https://www.theregister.com/AMP/2023/09/06/microsoft_stolen_...
- twisteriffic 3y agoAlso Microsoft still does not know how that secret was stolen and has knowingly mislead customers and the media about that fact. https://www.dhs.gov/news/2024/04/02/cyber-safety-review-board-releases-report-microsoft-online-exchange-incident-summer https://www.dhs.gov/news/2024/04/02/cyber-safety-review-boar...
- deleted 3y ago[deleted]
- HillRat 3y agoSpecifically, a vintage 2016, unrevokable consumer signing key that was inadvertently allowed to sign identity tokens for enterprise substrates, which is a whole security house of cards.