Windows 0day privilege escalation still not fixed

Re:Windows 0day privilege escalation still not fixed by jiggawatts on Wednesday December 23, 2020 @08:20PM (#25524235)

It's really obvious that Azure has much lower adoption than AWS. For example, I evaluated their new Front Door combo accelerator / CDN product recently. One page listed their customers, and there were about a half dozen total. Out of curiosity, I scanned the top 1000 domains and found none using it. I got the impression that I was one of the few people even evaluating it, let alone using it in production.

Despite just kicking the tyres on the thing, I found about half a dozen bugs or missing critical features. That's just shocking to me.

For comparison, CloudFront -- the most direct competitor -- is far ahead in features and is used by far more customers. It also works out of the box.

All of the other Azure services other than plain virtual machines give me the same impression of being a first adopter and one of only a handful of customers.

[ Parent | on HN ]

Re:Windows 0day privilege escalation still not fixed by PretzelPirate on Thursday December 24, 2020 @08:57AM (#25527456)

Those customers are probably using it in some of their services. I’ve worked with a number of enterprise companies who are moving to the cloud and most of them have never considered something like front door to route their traffic.

I’ve brought Front Door into their architecture for the services I was working on, but even if they decide it’s a great thing for the entire company to use, it will take them over a year to get security to approve it, and then multiple years to get it rolled out to all of their products.

With Azure’s core customer base being major enterprises, it’s not surprising that you had a hard time finding evidence.

[ Parent | on HN ]