News for hackers. Stuff that matters.
Re:Microsoft Azure Outage by tenplusfive on Wednesday January 25, 2023 @03:40AM (#34515904)
Luckily Microsoft also provides a service for that: Safelinks https://learn.microsoft.com/en-us/microsoft-365/security/off...

Also a personal favorite of mine: http://microsft.com (which apparently sometimes is used!)

Re:Microsoft Azure Outage by luckylion on Wednesday January 25, 2023 @04:35AM (#34516340)
I don't know whether it's a typo but https://support.microsoft.com/en-us/topic/contact-us-91f63b4... lists "EOC: [email protected] (For CEE and MEA)" under the Microsoft Credit Services. It feels like a typo, but who knows. If they don't have anything in place to catch this type of error, it's probably a good idea to register every domain someone could accidentally type.
Re:Microsoft Azure Outage by fomine3 on Wednesday January 25, 2023 @07:30PM (#34526237)
There's no MX record on the domain so it seems to typo
Re:Microsoft Azure Outage by jiggawatts on Wednesday January 25, 2023 @05:31AM (#34516691)
microsft.com was used specifically for telemetry to bypass web proxy blocks for *.microsoft.com put in by administrators of secure networks.

I know this because I was one of those admins trying to plug the leaks.

Windows 10 + Office uses 200+ domains just for Microsoft stuff, of which something like 120 are for telemetry.

Re:Microsoft Azure Outage by ridgered4 on Wednesday January 25, 2023 @08:50AM (#34518176)
And I imagine they add new domains with updates all the time.

At home I was trying to avoid random reboots from updates in a full proof way in a Windows VM that ran long processing tasks. I determined the only reasonable course of action was to remove all internet access. Stamping out the massive list of changing domains (and hard coded ip addresses?) would just be to much work that I know I would never keep up with.

A white list might work.

I mused that you could have a constantly updating Windows machine and monitor all of its connections, adding them to a block list on an external firewall but in addition to being complex to setup I bet it wouldn't even catch everything.

Re:Microsoft Azure Outage by zerohp on Wednesday January 25, 2023 @01:49PM (#34522478)
Yet people continue to defend Microsoft's telemetry practices. The OS won't let you opt out without it fighting you and they'll even fight you for blocking it on the network.

Windows is spyware.