undefined | Better HN

0 pointskerng4y ago0 comments

This sounds like no basic pen testing was performed - quite surprised Microsoft isn't doing that.

Seems like their resources (billions in cash) aren't allocated correctly.

0 comments

3 comments · 1 top-level

spydum4y ago· 2 in thread

I'm sure it was pentested, but the problem is pentesting quality can vary wildly. Hard to know if you have a great tester or a great dev team.

scns4y ago

How are you sure when Windows is tested by the users and they scaled down their testing teams? Genuinely curious?

spydum4y ago

Late to reply but the answer is services are different than desktop software. Azure services fall under a rigorous compliance regime and pentesting (3rd party even) is part of that. Just goes to show compliance does not always mean secure.

j / k navigate · click thread line to collapse