Live data from Hacker News

Despite doubts, federal cyber experts approved Microsoft cloud service

propublica.org

41–50 of 249 posts

Re: Despite doubts, federal cyber experts approved Microsoft cloud service

#41

The sheer amount of conflict of interest with folk involved in this later getting employed by Microsoft is a bit crazy.

There was definitely a point (late 90s?) when Microsoft finally figured out how to play the game. Coincided with the antitrust stuff.

Re: Despite doubts, federal cyber experts approved Microsoft cloud service

#42

Recently tried using Entra ID. There are 12 ways to enforce MFA, 20 days ways to disable users, 4 ways to authenticate users, Add conditional access stuff with 50 variables and templates etc. You can customize the way you want. After configuring it, my colleagues could not log in. Thats one way to secure your organization.

same experience for us, and then they email the living shit out of you about how your weekly entra id stats are good or bad, and you can not opt out of these emails.

> they email the living shit out of you

This sounds like LinkedIn.

Re: Despite doubts, federal cyber experts approved Microsoft cloud service

#43
Was this approval before or after evaluators discovered this?

> Microsoft on Friday revised its practices to ensure that engineers in China no longer provide technical support to U.S. defense clients using the company’s cloud services.

Ref: https://www.cnbc.com/2025/07/18/microsoft-china-digital-esco...

Re: Despite doubts, federal cyber experts approved Microsoft cloud service

#44
post #29

Recently tried using Entra ID. There are 12 ways to enforce MFA, 20 days ways to disable users, 4 ways to authenticate users, Add conditional access stuff with 50 variables and templates etc. You can customize the way you want. After configuring it, my colleagues could not log in. Thats one way to secure your organization.

Same here, except with Minecraft and XBox One. I don’t understand how they have non-zero market share.

I remember trying to buy $9 worth of Minecraft In-app Whatever for my kid, and the goose chase Microsoft put me on just to log in and buy something was totally out of this world. I ended up needing to contact their fraud department around step 74.

Re: Despite doubts, federal cyber experts approved Microsoft cloud service

#45

Earlier quoted context omitted.

same experience for us, and then they email the living shit out of you about how your weekly entra id stats are good or bad, and you can not opt out of these emails.

> they email the living shit out of you This sounds like LinkedIn.

Wait a minute. It is owned by Microsoft.

Re: Despite doubts, federal cyber experts approved Microsoft cloud service

#46
post #29

Earlier quoted context omitted.

Same here, except with Minecraft and XBox One. I don’t understand how they have non-zero market share.

I remember trying to buy $9 worth of Minecraft In-app Whatever for my kid, and the goose chase Microsoft put me on just to log in and buy something was totally out of this world. I ended up needing to contact their fraud department around step 74.

I'm still annoyed that I can't share those Minecraft purchases with a family.

Re: Despite doubts, federal cyber experts approved Microsoft cloud service

#47

Microsoft has never been good at security, and that is why their centralization to cloud is absolutely terrifying. I'm reminded of Storm-0558 [1] where a stolen signing key was able to forge authentication tokens for any MSA / Azure AD / Government AD user. They downplayed the severity. Just imagine if that level of access was used to pull a Stryker on a nation-wide scale. That is an economic disaster waiting to happ…

I'll do you one better: stealing the signing key was not even necessary.

https://www.bleepingcomputer.com/news/security/microsoft-ent...

Post reply on HN