6 ms·

The choice of cloud operators is down to two. How is it that google can totally screw up so badly?

by rswail 2y ago

neffy 2y ago
Hate to disillusion you - but exactly this happened to us on AWS a couple of years ago. 1 months research compute - no biggie, but no more AWS for us either.
- chucky_z 2y ago
  To counterpoint this with 'not for thee, but for me.' If you are spending > $1m/yr with AWS this will never happen. The decisions need to go through a TAM who will block this kind of thing. For smaller users I can imagine this sort of thing happens pretty regularly with every cloud, even smaller ones. Please reply if you had a TAM and were spending that much! I'd be personally interested to hear that was the case.
  - neffy 2y ago
    No, we had the lowest tier (research - funding is an issue) - but more seriously SME's will get trapped in this as well, and if I had $1m/yr I would definitely be running my own datacenter. They offered to investigate if we paid for support, I counter-offered with not using the chat script in one of my courses as an example of AWS customer "support", and we ended up getting a full refund at least.
sidcool 2y ago
You mean AWS and Azure?
- justinclift 2y ago
  Azure has a very bad reputation for terrible security, although weirdly a lot of enterprises don't seem to care. :(
  - RyeCombinator 2y ago
    Where can we fund more information about this?
    - justinclift 2y ago
      There are so many that it's just not funny. :( • https://www.nbcnews.com/tech/security/scathing-federal-report-rips-microsoft-shoddy-security-insincerity-res-rcna146177 https://www.nbcnews.com/tech/security/scathing-federal-repor... • https://www.wiz.io/blog/bingbang https://www.wiz.io/blog/bingbang • https://www.theverge.com/2023/7/12/23792371/security-breach-china-us-government-emails-microsoft-cloud-exploit https://www.theverge.com/2023/7/12/23792371/security-breach-... • https://www.wiz.io/blog/midnight-blizzard-microsoft-breach-analysis-and-best-practices https://www.wiz.io/blog/midnight-blizzard-microsoft-breach-a... These are just the first few I've found for the last 12 months. There are more if you go back even 12 months further, and I'm pretty sure the above aren't the complete list for the last year anyway. Microsoft are actually really bad at this Cloud "security" thing. :( :( :(
      - dingdong33 2y ago
        [dead]
      - Bognar 2y ago
        3 of those are about Exchange and one is about Bing (involving AAD, but it was an AAD app that was misconfigured and not an AAD issue itself). The teams that run Azure are in entirely separate organizations with wildly different product stacks. Exchange has a bunch of decades old infrastructure and is a security nightmare afaik. Dunno much about Bing. The "org chart" graphic with MS orgs all pointing guns at each other is real shit. Different orgs have very different security postures, and Azure's is much stronger than others. Source: spent some time at MS
  - sumedh 2y ago
    > although weirdly a lot of enterprises don't seem to care. :( Probably because Azure is cheaper than AWS and I am sure MS might be throwing some freebies/discounts if the customer is using Enterprise Office.

The choice of cloud operators is down to two. How is it that google can totally screw up so badly?

by rswail 2y ago

The choice of cloud operators is down to two. How is it that google can totally screw up so badly?

Hate to disillusion you - but exactly this happened to us on AWS a couple of years ago. 1 months research compute - no biggie, but no more AWS for us either.

chucky_z 2y ago
To counterpoint this with 'not for thee, but for me.' If you are spending > $1m/yr with AWS this will never happen. The decisions need to go through a TAM who will block this kind of thing. For smaller users I can imagine this sort of thing happens pretty regularly with every cloud, even smaller ones. Please reply if you had a TAM and were spending that much! I'd be personally interested to hear that was the case.
- neffy 2y ago
  No, we had the lowest tier (research - funding is an issue) - but more seriously SME's will get trapped in this as well, and if I had $1m/yr I would definitely be running my own datacenter. They offered to investigate if we paid for support, I counter-offered with not using the chat script in one of my courses as an example of AWS customer "support", and we ended up getting a full refund at least.

sidcool 2y ago

You mean AWS and Azure?

justinclift 2y ago
Azure has a very bad reputation for terrible security, although weirdly a lot of enterprises don't seem to care. :(
- RyeCombinator 2y ago
  Where can we fund more information about this?
  - justinclift 2y ago
    There are so many that it's just not funny. :( • https://www.nbcnews.com/tech/security/scathing-federal-report-rips-microsoft-shoddy-security-insincerity-res-rcna146177 https://www.nbcnews.com/tech/security/scathing-federal-repor... • https://www.wiz.io/blog/bingbang https://www.wiz.io/blog/bingbang • https://www.theverge.com/2023/7/12/23792371/security-breach-china-us-government-emails-microsoft-cloud-exploit https://www.theverge.com/2023/7/12/23792371/security-breach-... • https://www.wiz.io/blog/midnight-blizzard-microsoft-breach-analysis-and-best-practices https://www.wiz.io/blog/midnight-blizzard-microsoft-breach-a... These are just the first few I've found for the last 12 months. There are more if you go back even 12 months further, and I'm pretty sure the above aren't the complete list for the last year anyway. Microsoft are actually really bad at this Cloud "security" thing. :( :( :(
    - dingdong33 2y ago
      [dead]
    - Bognar 2y ago
      3 of those are about Exchange and one is about Bing (involving AAD, but it was an AAD app that was misconfigured and not an AAD issue itself). The teams that run Azure are in entirely separate organizations with wildly different product stacks. Exchange has a bunch of decades old infrastructure and is a security nightmare afaik. Dunno much about Bing. The "org chart" graphic with MS orgs all pointing guns at each other is real shit. Different orgs have very different security postures, and Azure's is much stronger than others. Source: spent some time at MS
- sumedh 2y ago
  > although weirdly a lot of enterprises don't seem to care. :( Probably because Azure is cheaper than AWS and I am sure MS might be throwing some freebies/discounts if the customer is using Enterprise Office.