Did Microsoft actually put 'get repeatedly pwned by Syrian hackers' on its 2014 todo list?

"Redmond was forced to admit . . ."

In a nutshell, this is what's wrong with online security; these companies deny and deny until the evidence is overwhelming.

The result is that when a company like MS (or Adobe, or Sony, etc . . .) says words to the effect of "no customer data was compromised", what it really means is "no one's been able to prove customer data was compromised".

In this instance it seems that it was internal only but the take away is still the same: don't be honest unless you have to. (Apparently.)

Is security really rocket science?

Why does this still happen with monotonous regularity to the big boys?

MS have access to some seriously clever chaps who know how to secure stuff. In this case it's just a blog so how hard can it be? Oh and email accounts - how daft are MS front line staff?

Surely MS might learn the "something you know and something you have" mantra eventually. They could always pop in "something you are" as well but that would not really be necessary for this.

Why not buy a few 100,000 RSA tokens? - they're NSA approved.

Security is still optional in this company despite one of the earliest, widely publicised screwups I can instantly recall being Cisco branded internet facing routers that were left with default passwords - hilarious results. To be fair - my memory might be failing - the actual fault might have been a flaw in IOS that was exploited. I'm still pretty sure it was stupid passwords.

I also find their "best practice" mantra that they try to ram down your throat demeaning - there is no such thing as "best practice". There is "good practice" and "bad practice" in IT security - but no best.

Twats.

Cheers

Jon

Not Microsoft's fault

The modern computing workstation is just too horribly complex to secure. Anybody with Windows, IE and Office is going to be vulnerable to a targeted exploit from time to time. The company and its staff can hardly be held liable for this inherent complexity in integrated enterprise IT solutions.

Er... Wait a minute...

So we are supposed to

...trust this Microsoft Cloud??

I don't think so!

Users, is all about the users

and how good they have been trained.

It is not M$, or Adobe, or ... whatever.

AFAIK, Is their uses and the employee rotation that causes this issues.

*Russian* hackers.

They're Russian.