Live data from Hacker News

Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?

news.ycombinator.com

11–20 of 81 posts

Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?

#11

>but I think it's more like a stolen credit card situation How did the account get compromised? What was the nature of the attack (e.g. cryptocurrency mining, expensive egress traffic for file hosting, etc.)? Every (consumer) credit card I've seen requires you to take reasonable steps to keep the cards secure to be eligible for fraud protection (e.g. changing the PIN if compromised, not lending it to people, alerting…

[deleted]

Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?

#13
That really sucks and is the risk of using cloud solutions with no spending limit and a lack of monitoring.

You should still have someone to keep an eye on it when using cloud solutions. And when you already have someone to keep an eye on it there's a good chance you might be better off managing the infrastructure yourself.

Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?

#14
Don't pay it. Send them notice, by registered letter, that the charges are fradulent. If a credit card was charged, try to initiate a chargeback/fraud claim.

Once you pay it, you lose all leverage. You're much less likely to ever get any money back.

Probably consult with a lawyer.

Cloud hosting charges are basically all profit for the hosting company. They didn't really lose anything except a bit of electricity. In my experience, companies are pretty willing to forgive fraudulent charges if you don't have an unusual history of them.

Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?

#15
When that happened to us, we found an article showing Tesla got hacked the same week as us (was aws) and they got the money back, so why not us?

We got the money back and fired the guy who had a jenkins opened without password, granting terminal access to anyone.

Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?

#16
I can't help you with the legal side of things, but moving forward I advise hiring some security-aware infra guy. The root cause of most of these incidents is some human being incompetent (leading to things like poor security and relying on manual processes) or reckless.

Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?

#17
post #15

When that happened to us, we found an article showing Tesla got hacked the same week as us (was aws) and they got the money back, so why not us? We got the money back and fired the guy who had a jenkins opened without password, granting terminal access to anyone.

You say: "We got the money back and fired the guy who had a jenkins opened without password, granting terminal access to anyone."

Why did you fire the employee (?) so quickly? Did he have a history of negligence and/or incompetence on the job and this was the last straw that broke the camel's back?

Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?

#18
post #15

When that happened to us, we found an article showing Tesla got hacked the same week as us (was aws) and they got the money back, so why not us? We got the money back and fired the guy who had a jenkins opened without password, granting terminal access to anyone.

Why was that guy running Jenkins without a password?

Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?

#19
This is a conundrum. On one hand, I understand how frustrating something like this can be. But on the other hand, your cloud provider did provide those services that you're being billed for. So they did incur costs, why would they just eat those costs?

Unless they're somehow at fault by exposing your credentials or making it easier for hackers to log in without 2FA or something of that nature.

If you're using a credit card to pay (though can't see a credit card having a 200k limit, even business) you might want to see if they can help (though it's not the credit card itself that was stolen, so it's unlikely they'd cover you). Otherwise, I'd imagine you're SOL unless you have some other insurance you can rely on.

Re: Ask HN: One of our Azure accounts was hacked – how to negotiate the bill?

#20

I'm not sure why you would be liable for fraud

To play the devil's advocate, why would Azure be liable for OP's security lapse?

This would've been much easier if someone stole your credit card and bought things with it (the CC company would help with the chargeback).

Post reply on HN