"Secret" Agent Exposes Azure Customers to Unauthorized Code Execution

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by duckhelmet on Tuesday September 14, 2021 @10:50PM (#28534655)

"When customers set up a Linux virtual machine in their cloud"

Yea, make sure to mention Linux in relation to vulnerabilities. Then pretend Microsoft is to the rescue with OMI. A FUD piece for Microsoft masquerding as a technical article.

[ Parent | on HN ]

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by Thorrez on Tuesday September 14, 2021 @11:38PM (#28534976)

You're saying this is promoting Microsoft? I would consider an article pointing out a vulnerability in Azure to be bad publicity for Microsoft. The title of the article also almost makes it sound like Microsoft is behaving nefariously by having a secret agent:

>“Secret” Agent Exposes Azure Customers To Unauthorized Code Execution

[ Parent | on HN ]

Re:"Secret" Agent Exposes Azure Customers to Unauthorized Co... by prepend on Wednesday September 15, 2021 @06:42AM (#28537481)

I think it was the multiple references to OSS being dangerous (never figured out why) left a bad taste for me.

But the vulnerability is only for azure Linux hosts so not sure how to report it without mentioning Linux.

What’s comical though, is I wonder what they use for Windows/non-Linux hosts. Is there an OMI equivalent for those hosts? Unless it’s open source, I guess we won’t know if it has a vulnerability.

[ Parent | on HN ]