this post was submitted on 03 Jun 2024
39 points (100.0% liked)

Cybersecurity

5965 readers
115 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities [email protected] [email protected] [email protected] [email protected] [email protected]

Notable mention to [email protected]

founded 2 years ago
MODERATORS
 

​Security researchers at Tenable discovered what they describe as a high-severity vulnerability in Azure Service Tag that could allow attackers to access customers' private data.

top 2 comments
sorted by: hot top controversial new old
[–] [email protected] 13 points 7 months ago (1 children)

their answer; "it was never meant to be secure'

microsoft, thats like your whole problem all the time.

[–] [email protected] 10 points 7 months ago

That's not really what they said though. They said that this is not intended as a security mechanism, which is debatable from their original docs. They are maintaining that this was always intended to be used for routing and not as a source for block/allow lists. Frankly, regardless of your opinion on whether Microsoft is misrepresenting their original docs, nobody should be using Service Tags as security. Microsoft is completely correct there.