zlacker

[parent] [thread] 5 comments
1. mc32+(OP)[view] [source] 2023-02-08 23:00:05
I wouldn't be extraordinarily surprised if this is the case, but I do not expect it to be as lax as you suggest and given how it's presented to us it reads like someone trying to get people to not look at something. If you have things you can present as evidence that would carry water for your argument, otherwise it's random inflammatory claim on in the internet.

And I agree, Google does take security more seriously than most places.

replies(1): >>tormeh+Cx
2. tormeh+Cx[view] [source] 2023-02-09 02:18:59
>>mc32+(OP)
Of the major three cloud providers, Azure is by far the one whose security bugs I hear most about. Not that this necessarily has much relevance to search, but it doesn't inspire confidence in their culture.
replies(3): >>mc32+9A >>victor+mA >>sofixa+6n1
◧◩
3. mc32+9A[view] [source] [discussion] 2023-02-09 02:39:12
>>tormeh+Cx
Agreed, but parent poster made fabulous claims based on hearsay. It could be true. But it also might be a motivated competitor trying to distract their rival as well.

Related question, if security is so bad, how did they win Project J.E.D.I? (honestly curious)

replies(1): >>coredo+PL
◧◩
4. victor+mA[view] [source] [discussion] 2023-02-09 02:40:57
>>tormeh+Cx
Ditto. I work with all three on a daily basis and Azure is the worst
◧◩◪
5. coredo+PL[view] [source] [discussion] 2023-02-09 04:39:32
>>mc32+9A
Cloud security is different, especially for these government contracts. Everything has to be certified to a higher standard and the staff all have to have clearances. A clearance gives you a nice comp boost, so dorking around looking at stuff because you can is a good way to get it yanked.
◧◩
6. sofixa+6n1[view] [source] [discussion] 2023-02-09 10:46:59
>>tormeh+Cx
> Azure is by far the one whose security bugs I hear most about.

Only* about. GCP and AWS haven't had cross-tenant security bugs, meanwhile Azure have had multiple, and trivial ones to boot. If a multitenant service can have such poor security, it's doubtful internal only stuff is any better.

[go to top]