waz0wski
Joined 12 years ago
Joined 12 years ago
[2026] Erosion of Trust @ Azure
https://news.ycombinator.com/item?id=47616242
https://isolveproblems.substack.com/p/how-microsoft-vaporize...
[2026] https://www.microsoft.com/en-us/security/blog/2026/05/18/sto...
[2025] https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft...
[2025] https://www.securityweek.com/all-microsoft-entra-tenants-wer...
[2024] https://www.cloaked.com/post/microsoft-data-breach
[2023] https://www.reuters.com/world/us/chinese-hackers-stole-60000...
[2023] https://www.wiz.io/blog/storm-0558-compromised-microsoft-key...
[2022] https://www.spiceworks.com/it-security/cloud-security/news/m...
[2022] https://techcrunch.com/2022/03/23/microsoft-lapsus-hack-sour...
[2021] https://www.cpomagazine.com/cyber-security/microsoft-power-a...
[2021] https://www.darkreading.com/cloud-security/microsoft-azure-c...
And this is just the Azure / O365 stuff - there's been thousands of Windows client/server and Office software exploits across the same time period
Anyone that's had to deal with Microsoft will tell you this means nothing
If you can even get attention from someone, you'll be bounced between teams and people who barely know the products they are "supporting"
Don't get me started on the Azure and O365 management portals
The only worse support experience I've had was with Oracle where it could take days just to get the boilerplate "send us your logs" response on a Sev1 issue, despite the logs already being provided in the initial ticket
In both cases, this is while at F100 companies with millions of dollars of licensed software and premium support contracts
So, sort of like fuzzing. There's a scary amount of exploitable stuff like this sitting in every BSD and Linux system out there, including every embedded system running old kernels in routers, cars, plcs, on and on
BastilleBSD is another great way to run FreeBSD+jails using their templates
Uses Exo - https://exolabs.net
You can do it with other software, that's just one of the quick-and-easy setups if you've got a spare 40-60k for studios sitting around
Take your car to a dealership for service and one of the first things their software does is download all of the data and phone it home
It was a huge shift in the world of system administration, gave birth to devops, and, along with the rise of containers & cloud computing, it radically altered how companies ran their infrastructure
Some people leaned into it, others didn't and a huge rift opened up between them
I used to say "automate all the things" - I still do, but I used to too
AI tools are just an acceleration of that mindset and in my world of cloud/devops/sre I'm heavily leaning into AI-driven development and daily workflow
Yep..
And image files were, and continue to be, a huge exploit attack vector
Works great for small-medium scale
MAC + Temporary Containers extension is how web browsing should be handled by default imo
No website deserves permanence of any data in my browser unless I so choose
I haven't seen similar functionality in any of the new generation of browsers, nor any of the Firefox spinoffs as-yet
Amazon has been doing it with Firecracker for a while and Kata containers is another popular one
It had many hardware upgrades over the years - upgraded CPUs, 128GB RAM, 4TB NVME storage, a modern AMD GPU, USB3/c, thunderbolt, etc
The only reason it got replaced is because it became too much of a PITA to keep modern OSX running on it (via OCLP)
Replaced with an M4 Max Mac Studio, which is a nice and faster machine but with no ability to upgrade anything and much worse hardware resale value on M-series I'll have to replace it in 2-3 years