Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found

trustedsec.com

Post reply on HN
Print view View original

101–110 of 116 posts

Re: Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found

#101

Post by twoodfin »

toomuchtodo wrote: post #64
twoodfin wrote: post #58

Earlier quoted context omitted.

“Fake but accurate.” ProPublica has an agenda, and they slant their reporting to push it. You can like their agenda and support this effort, but it’s not journalism.

What is their agenda?

Compare 600+ stories tagged for the Trump administration:

https://www.propublica.org/topics/trump-administration

…with 16(!!) since 2020 on Biden’s term:

https://www.propublica.org/topics/biden-administration

My favorite missing Biden story that should have been right in their wheelhouse: The unprecedented $36 billion bailout of the Teamsters’ pension fund.

https://www.statesman.com/story/news/politics/politifact/202...

Re: Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found

#102

Post by bigfatkitten »

DetroitThrow wrote: post #67
jacquesm wrote: post #38

Earlier quoted context omitted.

That is quite the indictment.

I am not very close with every one of these engineers, and some no longer work at MSFT, but yes talking to employees in Seattle working on security made me never want to use Azure.

Last I heard, the CO+I org has some pretty serious cultural problems that contribute to this, and which will not be easily solved.

Re: Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found

#103

Post by [deleted] »

rithdmc wrote: post #52
bulbar wrote: post #25

Earlier quoted context omitted.

They still lied, because they didn't say "X is shit" but "Z said that X is shit", however Z apparently never said that. I have become very cautious of such stories for this very reason. Who gets how much blame has a lot to do with "culture" or momentum. Bashing Microsoft for example is always super fine, but at multiple occasions I found the facts to be much more nuanced.

Titles are editorialised and space limited. The first couple lines in the article linked above make the nuance pretty clear. [edit: 'pretty' instead of 'perfectly']

[deleted]

Re: Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found

#105

Post by johnthescott »

int0x29 wrote: post #96
xp84 wrote: post #65

Earlier quoted context omitted.

Is that true or you’re just assuming it’s so?

I definitely remember DOGE gutting CISA. Other cuts were not always due to DOGE. A good chunk of the FBI's computer security and counter intelligence people got reassigned to immigration enforcement. The committee investigating the US cell network hacks got cut extensively but I don't remember who did it.

telcos already have strong teams themselves who monitor towers.

Re: Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found

#106

Post by jiggawatts »

adrian_b wrote: post #51
jiggawatts wrote: post #47

Earlier quoted context omitted.

Silicon Valley likes to pretend Microsoft doesn't exist. I... get it. The FAANGS needed to scale to a level where paying per-core licensing fees for an operating system was simply out of the question, not to mention the lack of customisability. As a consequence, they all adopted Linux as their core server operating system. Then, as their devs made millions in share options, they all scattered and made thousands of li…

That may have been the story, but avoiding paying per-core licensing fees for an operating system is the only sane decision. Operating systems and other applications that demand per-core licensing fees exist only because the people who buy them do not use their own money for this, so they do not care how much money they are wasting. Most companies waste huge amounts of money not only for software, but for many other…

> is the only sane decision.

Past a certain scale I would agree with you.

> the friction caused by the consequences that such changes could have in modified licensing fees

Your experience is uncommon.

In most corporate settings the IT staff never think about licensing because there is some sort of Enterprise Agreement in place.

In my work the only exception to this is SQL Server, which got stupidly expensive over time while falling behind in features.

Re: Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found

#107

Post by icedchai »

jojobas wrote: post #39
marcyb5st wrote: post #22

Earlier quoted context omitted.

Isn't it an age thing mostly? Younger admins hate Microsoft with a passion it seems to me. Or is just my circle of acquaintances?

You don't get promoted to positions with power to choose for hating Microsoft.

I worked at a place where someone made the deliberate decision to migrate from Google Workspace to Microsoft 365 / Outlook / whatever it's called today.

"Most of our partners use Microsoft", so we have to suffer with it, too.

Re: Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found

#108

Post by toomuchtodo »

twoodfin wrote: post #101
toomuchtodo wrote: post #64

Earlier quoted context omitted.

What is their agenda?

Compare 600+ stories tagged for the Trump administration: https://www.propublica.org/topics/trump-administration …with 16(!!) since 2020 on Biden’s term: https://www.propublica.org/topics/biden-administration My favorite missing Biden story that should have been right in their wheelhouse: The unprecedented $36 billion bailout of the Teamsters’ pension fund. https://www.statesman.com/story/news/politics/politifact/202…

Well, yeah, their agenda is reporting on fraud and illegal actions. If you do more fraud or illegal actions, you will have more stories about you. Trump does more fraud and illegal actions, objectively. If you’re a Trump supporter, reality may make you sad and angry when in conflict with the mental model.

I don’t mind pension bailouts, compared to tax cuts for the very wealthy and unnecessary military action in the Middle East (which has cost ~$50B as of this comment). Compare the costs.

Re: Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found

#109

Post by jojobas »

icedchai wrote: post #107
jojobas wrote: post #39

Earlier quoted context omitted.

You don't get promoted to positions with power to choose for hating Microsoft.

I worked at a place where someone made the deliberate decision to migrate from Google Workspace to Microsoft 365 / Outlook / whatever it's called today. "Most of our partners use Microsoft", so we have to suffer with it, too.

If you're trying to sell to people who use teams, sharepoint and whatnot, and you won't, you're putting yourself in a commercial disadvantage.

I was very happy after I got away from MS-stack companies, but I totally understand why one would switch to MS.

Re: Full Disclosure: A Third (and Fourth) Azure Sign-In Log Bypass Found

#110

Post by twoodfin »

toomuchtodo wrote: post #108
twoodfin wrote: post #101

Earlier quoted context omitted.

Compare 600+ stories tagged for the Trump administration: https://www.propublica.org/topics/trump-administration …with 16(!!) since 2020 on Biden’s term: https://www.propublica.org/topics/biden-administration My favorite missing Biden story that should have been right in their wheelhouse: The unprecedented $36 billion bailout of the Teamsters’ pension fund. https://www.statesman.com/story/news/politics/politifact/202…

Well, yeah, their agenda is reporting on fraud and illegal actions. If you do more fraud or illegal actions, you will have more stories about you. Trump does more fraud and illegal actions, objectively. If you’re a Trump supporter, reality may make you sad and angry when in conflict with the mental model. I don’t mind pension bailouts, compared to tax cuts for the very wealthy and unnecessary military action in the M…

Here’s an article on their front page today on a few thousand dollars in campaign contributions, no allegations of fraud or anything illegal:

https://www.propublica.org/article/sean-duffy-michael-alfons...

The Teamsters bailout was something like a million times that, from a Democratic president to a critical Democratic constituency.

Post reply on HN