Comment on Microsoft finally explains cause of Azure breach: An engineer’s account was hacked

foggy@lemmy.world ⁨1⁩ ⁨year⁩ ago

• hemko@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago

  Successful credential theft can really never be blamed on a single individual unless it can be proved to be malice. It’s always a systemic failure, even in cases where the user didn’t follow a process because of X. The issue was the X in the process and another user would have done the same thing eventually.

  source

  • spacebirb@lemmy.world ⁨1⁩ ⁨year⁩ ago

    Well… we can’t always assume the engineers are technologically savvy, I’ve met some pretty bad ones.

    source

    • hemko@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago

      Okay I’m just assuming the best from humanity. Probably shouldn’t always

      source
• Steeve@lemmy.ca ⁨1⁩ ⁨year⁩ ago

  Why would corporate hacking get sophisticated when the most efficient way to get access is still a simple phishing email?

  source

  • photonic_sorcerer@lemmy.dbzer0.com ⁨1⁩ ⁨year⁩ ago

    The human is always the weakest cog in the machine… just wait until we’re all replaced.

    source
• Potatos_are_not_friends@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Ideally your company follows the swiss cheese model of incidents. It’s not the people, but the processes in place that brought us there.

  The only company I worked where that model didn’t follow was run by a moron who micromanaged, blamed people and was a Big fucking baby. That company went bankrupt after 3 years.

  source
• turkalino@lemmy.yachts ⁨1⁩ ⁨year⁩ ago

  Probably only if he was found to be grossly negligent. Otherwise, it’s really more of a methodology/procedural failing on the company’s part

  source
• Reygle@lemmy.world ⁨1⁩ ⁨year⁩ ago

  even the most tech savvy will be vulnerable.

  *are

  source