7 ms·
Microsoft said it lost weeks of security logs for its customers' cloud products
- kelsey98765431 2y agoI wonder which intelligence operation this supported...
- jaimsam 2y ago[flagged]
- cptskippy 2y ago[flagged]
- zmgsabst 2y ago[flagged]
- mattigames 2y agoNor anyone prosecuted for the disappearance of the security cam footage of his cell during the alleged suicide due a "technical error".
- hsbauauvhabzb 2y ago[flagged]
- mattigames 2y ago[flagged]
- hsbauauvhabzb 2y ago[flagged]
- mattigames 2y ago[flagged]
- h4ck_th3_pl4n3t 2y ago> This entire thread smells of multiaccounting Indeed so, username "hsbauauvhabzb".
- hsbauauvhabzb 2y agoEh, if you can correlate my account with another I’m interested in meeting them. I use several burners across systems and rotate them semi regularly. It’s less about attribution and more about not caring about who is voicing an opinion, rather than whether their opinion holds value. Either way, I don’t think I’ve voiced any significant opinions one way or another, with the exception of a personal vendetta against google.
- deleted 2y ago[deleted]
- LAC-Tech 2y agoWhat are you referring to here?
- notimetorelax 2y agoNone, Microsoft’s internal logging infrastructure is from the nineties.
- sofixa 2y agoSame as their security infrastructure then.
- marcosdumay 2y agoWhoever ran the Solar Winds infrastructure probably put some effort into hardening the MS infrastructure too.
- h4ck_th3_pl4n3t 2y agoWe call them APT -1 (Microsoft)
- hinkley 2y ago[flagged]
- ethbr1 2y ago>> The affected products include Microsoft Entra, Sentinel, Defender for Cloud, and Purview, according to the Business Insider report. Oof. Entra (formerly Azure Active Directory) being impacted is rough. But who needs SSO logs?
- gonzo41 2y agoThere was a time when we looked at the sky and didn't think about asteroids hitting the earth. Ignorance is bliss. -- btw, when they listed Entra, I thought it was Encarta. I momentarily so excited that still existed.
- rudasn 2y agoEncarta 96
- isodev 2y agoThat animation when it was searching... it was so amazing back then, you could "feel" the knowledge and facts unfolding in one's computer.
- aitchnyu 2y agoThe same users then revolted at travel sites returning results too fast, so they had spinners to show they were hard at work compiling results.
- ethbr1 2y agoI'm kind of sad for the people that didn't get to experience the magic of book encyclopedia -> encyclopedia on CD-ROM -> Wikipedia. It was a lot of amazing change to live through! (Cue grade school teachers reminding students that Wikipedia isn't a valid source)
- hggigg 2y agoUh, we do. Have compliance obligations. Fortunately our production systems are NOT integrated into Entra. Only the non-customer stuff.
- outside1234 2y agoWhy did they admit this publicly?
- downrightmike 2y agoProbably to have something out there so that when they admit it was a foreign actor who deleted them, it won't seem like big news that it is. That's typical for MSFT and how they handle these things.
- hulitu 2y ago> when they admit it was a foreign actor It is always a "foreign actor". I bet that all bullshit implemented in Windows in the last years (telemetry, spying, dumbed down UI) was also from a "foreign actor". /s
- imeanitstrue 2y ago[dead]
- tacticus 2y agothey got called out for hiding the reporting of it in tooling that can't be accessed by most security teams.
- dathinab 2y agoand they have some large contracts to which they are legally obligated to disclose it, maybe why they tried to hide it
- locusofself 2y agoThere really was a bug in an application that just about every team runs on their VMs (simplifying here) that pushes application logs to storage. Even my team had to restart processes to get logs going again. It was a "sev 0" incident - an oopsie that was not easy to fix without many, many teams taking manual steps to restart agents which normally just hum along in the background.
- stogot 2y agoAre you talking about within Microsoft internally or as a customer of theirs?
- justinclift 2y ago> an oopsie that was not easy to fix Wouldn't it be nice if MS actually did automated testing to a reasonable depth, so stuff like this wouldn't keep happening? The recent ClownStrike global outage showed a lack of testing before deployment (by ClownStrike). This latest MS problem just demonstrates it's happening at the source (of Windows) too. It's not a good look.
- thewebguyd 2y agoThis is an industry-wide problem, not exclusive to Microsoft. I feel like everyone has just outsourced QA to users. There's been a drastic decline in software quality at release, particularly in the past year-year and a half. Initially I thought maybe it was just getting difficult to maintain these behemoth platforms that have been around since the 90s but it's infected the gaming industry as well, total green field projects where you can expect the v1.0 release to be almost unusable until 1.1 or 1.2+
- eitally 2y agoI think a lot of it has to do with how little software -- even enterprise software -- is actually written from the ground up. Reliance on both external libraries and modules owned by unrelated internal teams has made a lot of both the programming and debugging almost black box, where effective testing isn't really tractable.
- neya 2y agoIf you use Azure in any realistic production environments, then it's on you. Even with $100k in free credits, they couldn't convince me to use it for more than a month. It is expensive, the interface is highly user unfriendly and most important of all, their products don't at all seem reliable for production workloads because of stuff like this. Sorry Microsoft, I think you can do much better.
- BodyCulture 2y agoI was laughing recently when at some place they started to install MS software on all Linux machines to integrate them into Azure. At that point you should just stop and think for a while about it. Didn’t you go for Linux because you wanted to have a reliable system?
- ratg13 2y agoThe MS security software (for better or worse), is better than any open-source linux solution, and can follow attackers as they move laterally through the network, instead of linux servers being a big black hole were adversaries can do as they please. All security software from any vendor is going to have issues, and often you just have to go with whatever the company is running for the whole environment and not compromising security because of some jokes from the 90s
- stogot 2y agoAll the Linux shops I know not using MS security are doing just fine and probably better given the current headline you’re commenting under
- ratg13 2y agoYou seemed to have missed my point entirely. If your organization is running a chosen enterprise security solution, often fragmentation is not better, whatever your reasoning.
- azuresucksdeez 2y agoAzure sucks. Especially the Batch Service, the jobs scheduler is not accurate at all.
- PunchTornado 2y agoThere were comments here about how msft is more enterprise friendly than google because they don't lose any data. msft is the opposite of reliable.
- passwordoops 2y agoAnd MS expects us to trust they can deliver a functional, useful "AI" service product?
- lupusreal 2y agoIt could be functional and useful, but I wouldn't bet on secure.
- JohnMakin 2y agoSome of the worst infrastructure I've ever seen with terrible practices had elaborate mechanisms in place to make this kind of thing effectively impossible, because if it happens it's... pretty damn bad. I'm not sure I'd ever want my business to sit on Azure-managed cloud infra even before this. I'm trying to go through some thought experiments and even imagine how something like this is possible without some kind of full-system catastrophic error and I'm struggling.
- ruffrey 2y agoLet's to forget this long article from just over a month ago, outlining Microsoft's failings and seemingly willful neglect regarding cybersecurity overseas. https://www.lawenforcementtoday.com/bombshell-allegations-that-microsoft-using-chinese-employees-inside-china-to-oversee-dod-federal-government-cloud-infrastructure https://www.lawenforcementtoday.com/bombshell-allegations-th...
- eitally 2y agoOn the one hand, there are some important nuggets in this report. On the other hand, Schiller doesn't seem like an entirely credible witness and his outreach to look for government oversight seems limited to extreme MAGA Republican lawmakers, which is also telling. That said, I 100% agree that 1) relying on foreign national support staff to support critical USG infrastructure should not be allowed, and 2) all the big tech companies -- including the hyperscalers -- have deals with the PRC via domestic proxy businesses (Tencent, Alicloud, etc) in order to allow them to operate in China. There isn't enough oversight of these contracts, or the terms allowing Chinese hands-on access to the hardware & software stacks.
- bzmrgonz 2y agoSmells like cover-UP TO ME. `Their syslogs reveal an exploit in our platform sir!' <Marketing dept> 'Quick everyone, lets lose their logs and buy some more time'
- Smar 2y agoDid NSA steal them?
- tomkarho 2y agoWhy would they do that? They've got access. In fact, Microsoft might want to ask them if they have backups they could borrow.
- TeslaCoils 2y agoJust about tracks, it's Microsoft.
- nilsherzig 2y agoShould have used recall