Re:Everything authenticated by Microsoft is tainted
by nerdbert on Friday September 29, 2023 @10:41AM
(#37705031)
[delayed]
[ Parent
| on HN ]
Re:Everything authenticated by Microsoft is tainted
by jl6 on Friday September 29, 2023 @11:18AM
(#37705517)
Let's hope someone has spent the last 3 months reinstalling Azure from the original CD.
Re:Everything authenticated by Microsoft is tainted
by garganzol on Friday September 29, 2023 @11:37AM
(#37705818)
"MSN Limited Edition Gold CD" is actually a thing.
Re:Everything authenticated by Microsoft is tainted
by juancampa on Friday September 29, 2023 @12:40PM
(#37706724)
FCKGW-RHQQ2-YXRKT-8TG6W-2B7Q8
Re:Everything authenticated by Microsoft is tainted
by gorlilla on Friday September 29, 2023 @03:42PM
(#37709196)
Thanks. I used to have that on a piece of paper taped to my tower. I don't have that tower but instantly recognized it.
Re:Everything authenticated by Microsoft is tainted
by no_identd on Friday September 29, 2023 @03:49PM
(#37709273)
[Laughs in Trusting Trust Problem]
Re:Everything authenticated by Microsoft is tainted
by quickthrower2 on Friday September 29, 2023 @08:29PM
(#37711742)
You can but you need to install NT4 first, then do all the upgrades
Re:Everything authenticated by Microsoft is tainted
by mycall on Friday September 29, 2023 @01:03PM
(#37707082)
Why is there no way of knowing? I would think Microsoft is able to do forensic snapshot comparisons for their datacenters -- at least, I would assume a trillion dollar company does.
Re:Everything authenticated by Microsoft is tainted
by eqvinox on Friday September 29, 2023 @01:36PM
(#37707613)
Establishing that ability costs money (i.e. having snapshots & co.), and actually executing it costs further money.
Absent either customers paying for it, or regulations requiring it, Microsoft certainly won't sink money out of the goodness of their heart. I don't believe there are a lot of regulations for this — and how many customers do you think would pay for something like this? Realistically? :-(
Re:Everything authenticated by Microsoft is tainted
by insanitybit on Friday September 29, 2023 @04:53PM
(#37709954)
I mean, they at least have SOC2 compliance, and obviously a lot more (FEDRAMP). To get those certifications an auditor is going to make sure you have basic shit in place like logging, etc.
Re:Everything authenticated by Microsoft is tainted
by notnmeyer on Friday September 29, 2023 @05:15PM
(#37710162)
yeah, but SOC auditors barely understand the stuff you’re providing as proof.
Re:Everything authenticated by Microsoft is tainted
by insanitybit on Friday September 29, 2023 @06:39PM
(#37710936)
It's gonna depend on the auditor, but yeah of course SOC2 doesn't mean "you're secure" but unless you actively lie to your auditor you're going to have some basic stuff in place.
Re:Everything authenticated by Microsoft is tainted
by nerdbert on Monday October 02, 2023 @03:27PM
(#37743179)
They're not going to make sure of anything, in my experience, except that an org's IT management had a disappointing conversation with their team and then aspirationally checked boxes claiming to have things in place.