Unfortunately nobody in charge has seen consequences for their decision to save a few theoretical nickels, so far. But then again, a lot of software/IT related stuff would look completely different, if anybody did.

I do not think anyone belive clouds are cheaper. For a stable workload probably 2x as expecive. Especially when you also count the new finops department you need to know what you are actually paying for in the cloud.

What cloud do give is virtualy infinite capacity, infinite scale out performance, instant availabillity and scaleabillity up to a global presence, no up-front cost, no tear down cost, bragging rights, no long running contracts and api's for EVERYTHING.

Edit: I did see you write theoretically ;)

Given the average company I believe the cloud being more secure, of course they can shoot themselves d in the foot in the cloud as well but that wouldn't be the cloud being insecure. The cheaper part.... not sure if I would agree, it is more simple and easier to manage than your own physical hardware and all that entails, unless you require very little, that's for sure.

Wait, they stored passwords in plain text?

Microsoft said that no customer data was exposed

Sure, we'll just take your word for it, buddies. Cheers. /laughs in Linux

Lol! I used to pin him to my desktop. I loved having him for some reason...

That's what they all say before the customer data leak disclosure.

I am so glad that Microsoft always tells the truth so we can just take them at their word. It would be totally different if they had a history of lying and doing shady stuff.

As long as the data they lost doesn't get more details, that get more detail that gets customer data... or anorher signing key....

We gotta give them a reason to care before they will do anything about it. How many companies have suffered major data breaches over the past 5 years with basically no consequences?

To be fair Microsoft has never cared much about security. See the windows server (a relatively niche os on servers) second entry in this stat: https://www.statista.com/statistics/701020/major-operating-systems-targeted-by-ransomware/.

It is just that nowadays this kind of issues are more in the news because of "russian cyber criminals", while in the past no one really cared.

Not that I complain... Visibility is actually a good thing

The more staff a company has, the more chance of mistakes/idiots.

They should have scans to pick a lot of this up though.

Hmm, by using Authy I wouldn't receive these. They'd just be asked for the current code and unable to proceed.

On the one hand I'm happy not getting spammed like you with 2fa requests. On the other, I think I'd like to know if any of my user/password pairs have been compromised.

Why bother renaming it, it's always been microshit.