Backup bods at Microsoft lose CA audit data after server crash Microsoft is asking its certificate authority (CA) affiliates to send it their own copies of audit data after a MS system crash resulted in data loss. Microsoft lost audit data for about 147 roots after a system crash. The incident had the knock-on effect of generating query emails to scores of affected (temporarily disavowed …
I look after my own data, I have backups (GFS) on site and off and I have a DR site with replicas. I also have a business continuity plan. It's probably not foolproof but the whole lot is tested regularly.
If anyone is going to lose my data it will be me and not someone else. So I'll pass on AWS, Azure et al.
Missed an opportunity to make a joke about root cause analysis of the root CA audit data loss.
Addressed to "Many of you" -- So, uh, guys, we're not 100% sure which roots are impacted (is that important?).
This is likely an error on our side -- We don't know how this happened and the one person capable of reading the log files is not present, or we don't log, or it was malicious activity from some unknown third party.
It looks like it rolled back to an old backup -- again, we have some logging issues to resolve. No idea what happened, but it's possible that the system spontaneously decided to initiate a restore, or maybe Todd in storage was messing with snapshots...
lost data for about 147 roots -- I know, specific huh? Anyway, the mail log guy was available and he tells us that there were 146 similar emails sent along with the one we got a panicked reply about. So, yeah, we think 147 is about right. But maybe not.
If you received a message -- But the mail log guy is not quite as competent with regex so, while he was able to identify the message content match, he might have munged the To: field. Alternately, they discovered that the initial message was poorly crafted and likely caught in spam filters.
Please don't panic -- You really should panic
Sorry for the confusion -- Really? Sorry for the confusion. How about "Sorry for the fuck ups"
Miscoso$t spends lots of dollars trying to sell us their cloudy services as secure etc. It beggars belief that they are not one of their own customers. If Azure is not god enough for Microso$t then why should be trust it at all? Add to that the regular Office 365 failures over the last year and you start to question the ability of Microso$t to really turn itself into an online services company.
Microsoft never was and never will be a services company.
Every EULA of every one of their products has always indicated that you use it at your own risk and Microsoft is liable for nothing.
It seems Microsoft is not even liable for the proper record-keeping of its own certs.
And people keep on buying these clowns' software.
"Due to a problem on our servers, your CA audit records have been lost.
This requires you to verify your account being the recipient of this update. Failure to verify your records will result in account suspension.
Click on the Verify button below and enter your login information on the following page to Confirm your records.
Thank you
Microsoft Team"
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
